loki-mode 7.73.0 → 7.74.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.73.0
+# Loki Mode v7.74.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -406,4 +406,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.73.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.74.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.73.0
+7.74.0

package/autonomy/completion-council.sh

@@ -2812,8 +2812,34 @@ council_evaluate() {
         # Re-derive complete count from the round file
         local round_file="$COUNCIL_STATE_DIR/votes/round-${ITERATION_COUNT}.json"
         local complete_count=0
+        local members_present=0
         if [ -f "$round_file" ]; then
             complete_count=$(_RF="$round_file" python3 -c "import json, os; print(json.load(open(os.environ['_RF'])).get('complete_votes', 0))" 2>/dev/null || echo "0")
+            # WAVE13 CRITICAL quorum gate: how many voters actually responded
+            # (total_members records the ACTUAL returned count -- see
+            # voter-agents.sh). A degraded/partial dispatch response must never
+            # be honored as COMPLETE even if its (now quorum-aware) verdict
+            # somehow read COMPLETE. This is defense-in-depth: the parser
+            # already forces CONTINUE on undercount, but the completion-detection
+            # trust core must independently assert full quorum before stopping.
+            members_present=$(_RF="$round_file" python3 -c "import json, os; print(json.load(open(os.environ['_RF'])).get('total_members', 0))" 2>/dev/null || echo "0")
+        fi
+        # Normalize to integers (guard against empty/non-numeric on read failure)
+        case "$complete_count" in (''|*[!0-9]*) complete_count=0 ;; esac
+        case "$members_present" in (''|*[!0-9]*) members_present=0 ;; esac
+
+        # Quorum-presence gate (distinct from the DA-unanimity trigger below):
+        # a COMPLETE verdict only stands when EXACTLY the expected council
+        # responded. Any mismatch is a degraded response and fails closed:
+        #   - undercount (< COUNCIL_SIZE): missing voters are non-approval.
+        #   - overcount (> COUNCIL_SIZE): extra/unprompted findings (e.g. a
+        #     model adding a 4th 'devils-advocate' finding) would otherwise let
+        #     a low-approval-ratio response clear the fixed threshold=2. Both
+        #     directions must CONTINUE, so we assert exact quorum (== not <).
+        if [ "$members_present" -ne "$COUNCIL_SIZE" ]; then
+            log_warn "Council evaluate: COMPLETE rejected -- quorum mismatch ($members_present voters present, expected $COUNCIL_SIZE); failing closed to CONTINUE"
+            council_write_transcript "${ITERATION_COUNT:-0}" "REJECTED" "false" "false" "$_eval_threshold"
+            return 1  # CONTINUE
         fi
 
         if [ "$complete_count" -eq "$COUNCIL_SIZE" ] && [ "$COUNCIL_SIZE" -ge 2 ]; then

package/autonomy/lib/voter-agents.sh

@@ -273,6 +273,7 @@ loki_council_dispatch_agents() {
     _VA_ITER="$iteration" \
     _VA_VDIR="$verdicts_dir" \
     _VA_RFILE="$votes_dir/round-${iteration}.json" \
+    _VA_EXPECTED="${COUNCIL_SIZE:-3}" \
     python3 -c '
 import json, os, sys
 from datetime import datetime, timezone
@@ -290,6 +291,26 @@ it = int(os.environ.get("_VA_ITER", "0") or 0)
 vdir = os.environ["_VA_VDIR"]
 rfile = os.environ["_VA_RFILE"]
 
+# WAVE13 CRITICAL quorum fix: the quorum denominator MUST be the EXPECTED
+# council size (COUNCIL_SIZE), never the number of findings the model happened
+# to return. Pre-fix this parser computed threshold = (returned*2+2)//3, so a
+# degraded response with a single APPROVE finding (returned=1) yielded
+# threshold=1 and a COMPLETE verdict from a SINGLE voter, with the missing
+# voters silently dropped. That fails OPEN on the completion-detection trust
+# core. We now fail CLOSED: any undercount (returned < expected) forces a
+# CONTINUE verdict so a partial/degraded model response can never reach
+# COMPLETE on the returned subset. Design choice (Option 2): compute the
+# verdict in-path (rather than sys.exit -> heuristic fallback) so the round
+# file always records the actual returned count in total_members, making the
+# downstream quorum assertion in completion-council.sh meaningful and locally
+# testable without depending on the heuristic-path disk-state behavior.
+try:
+    expected_count = int(os.environ.get("_VA_EXPECTED", "3") or 3)
+except (TypeError, ValueError):
+    expected_count = 3
+if expected_count < 1:
+    expected_count = 1
+
 def to_legacy(vote: str) -> str:
     v = (vote or "").upper()
     if v == "APPROVE":
@@ -338,14 +359,34 @@ for idx, f in enumerate(findings, start=1):
 if total == 0:
     sys.exit(5)
 
-threshold = (total * 2 + 2) // 3
-verdict = "COMPLETE" if complete >= threshold else "CONTINUE"
+# Quorum-aware threshold (WAVE13). threshold is computed against the EXPECTED
+# council size so it can never shrink to 1 on a degraded response. Absent
+# voters (total < expected) are treated as non-approval: the round is forced
+# to CONTINUE and can never reach COMPLETE on the returned subset. With
+# expected=3, threshold = ceil(2/3 * 3) = 2, so 1-of-3 (or any single voter)
+# is structurally incapable of producing COMPLETE.
+threshold = (expected_count * 2 + 2) // 3
+if total != expected_count:
+    # Fail closed on ANY quorum mismatch:
+    #   - undercount (total < expected): missing voters count as non-approval.
+    #   - overcount  (total > expected): extra/unprompted findings (e.g. a model
+    #     adding a 4th finding) would otherwise let a low-approval-ratio response
+    #     clear the fixed threshold. A degraded response in either direction must
+    #     never reach COMPLETE on the returned subset.
+    verdict = "CONTINUE"
+else:
+    verdict = "COMPLETE" if complete >= threshold else "CONTINUE"
 round_data = {
     "round": it,
     "timestamp": datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ"),
     "complete_votes": complete,
     "continue_votes": total - complete,
+    # total_members records the ACTUAL number of voters that responded (not the
+    # expected size) so the completion-council quorum assertion can detect an
+    # undercount. expected_members records the size the verdict was judged
+    # against.
     "total_members": total,
+    "expected_members": expected_count,
     "threshold": threshold,
     "verdict": verdict,
     "votes": votes,

package/autonomy/loki

@@ -7396,10 +7396,10 @@ cmd_watch() {
                 return 0
                 ;;
             --once) run_once=true; shift ;;
-            --interval) poll_interval="${2:-2}"; shift 2 ;;
+            --interval) poll_interval="${2:-2}"; [ $# -ge 2 ] && shift 2 || shift ;;
             --interval=*) poll_interval="${1#*=}"; shift ;;
             --no-auto-start) no_auto_start=true; shift ;;
-            --debounce) debounce="${2:-3}"; shift 2 ;;
+            --debounce) debounce="${2:-3}"; [ $# -ge 2 ] && shift 2 || shift ;;
             --debounce=*) debounce="${1#*=}"; shift ;;
             -*)
                 echo -e "${RED}Unknown option: $1${NC}"
@@ -19877,11 +19877,11 @@ else:
                 case "$1" in
                     --name|-n)
                         name="${2:-}"
-                        shift 2
+                        if [ $# -ge 2 ]; then shift 2; else shift; fi
                         ;;
                     --alias|-a)
                         alias="${2:-}"
-                        shift 2
+                        if [ $# -ge 2 ]; then shift 2; else shift; fi
                         ;;
                     *)
                         shift
@@ -19897,10 +19897,21 @@ else:
                 exit 1
             fi
 
-            _REGISTRY_FILE="$registry_file" _PROJ_PATH="$path" _PROJ_NAME="$name" _PROJ_ALIAS="$alias" python3 -c "
+            # Route the read-modify-write through dashboard/registry.py so the
+            # mutation is serialized under its fcntl lock and written atomically
+            # (tempfile + os.replace), matching the v7.45.1 hardening that
+            # run.sh registration and mark_project_stopped already use. The
+            # inline open(...,'w') path here was unlocked and truncating, which
+            # could lose a concurrent writer's entry or expose a 0-byte file to
+            # a reader. Falls back to an atomic temp-file write if registry.py
+            # cannot be imported at runtime (never a bare truncating open).
+            _REGISTRY_FILE="$registry_file" _PROJ_PATH="$path" _PROJ_NAME="$name" _PROJ_ALIAS="$alias" \
+            _REGISTRY_SKILL="${SKILL_DIR:-$_LOKI_SCRIPT_DIR/..}" python3 -c "
 import json
 import os
+import sys
 import hashlib
+import tempfile
 from datetime import datetime, timezone
 
 registry_file = os.environ['_REGISTRY_FILE']
@@ -19908,41 +19919,62 @@ path = os.environ['_PROJ_PATH']
 name = os.environ['_PROJ_NAME'] or os.path.basename(path)
 alias = os.environ['_PROJ_ALIAS'] or None
 
-# Generate project ID
-project_id = hashlib.md5(path.encode()).hexdigest()[:12]
-
-# Load registry
-with open(registry_file, 'r') as f:
-    data = json.load(f)
+sys.path.insert(0, os.environ.get('_REGISTRY_SKILL', '.'))
+try:
+    from dashboard import registry
+except Exception:
+    registry = None
 
-projects = data.get('projects', {})
-now = datetime.now(timezone.utc).isoformat()
-
-if project_id in projects:
-    # Update existing
-    projects[project_id]['name'] = name
-    if alias:
-        projects[project_id]['alias'] = alias
-    projects[project_id]['updated_at'] = now
-    print(f'Updated: {name}')
+if registry is not None:
+    existing = registry.get_project(path)
+    project = registry.register_project(path, name, alias)
+    print('Updated: ' + name if existing else 'Registered: ' + name)
 else:
-    # Add new
-    projects[project_id] = {
-        'id': project_id,
-        'path': path,
-        'name': name,
-        'alias': alias,
-        'registered_at': now,
-        'updated_at': now,
-        'last_accessed': None,
-        'has_loki_dir': os.path.isdir(os.path.join(path, '.loki')),
-        'status': 'active',
-    }
-    print(f'Registered: {name}')
-
-data['projects'] = projects
-with open(registry_file, 'w') as f:
-    json.dump(data, f, indent=2)
+    # Fallback: atomic temp-file write (no truncating open) if registry.py
+    # is unavailable. Mirrors register_project semantics (sha256 id).
+    project_id = hashlib.sha256(path.encode()).hexdigest()[:12]
+    try:
+        with open(registry_file, 'r') as f:
+            data = json.load(f)
+    except (OSError, json.JSONDecodeError):
+        data = {'version': '1.0', 'projects': {}}
+    projects = data.get('projects', {})
+    now = datetime.now(timezone.utc).isoformat()
+    if project_id in projects:
+        projects[project_id]['name'] = name
+        if alias:
+            projects[project_id]['alias'] = alias
+        projects[project_id]['updated_at'] = now
+        print(f'Updated: {name}')
+    else:
+        projects[project_id] = {
+            'id': project_id,
+            'path': path,
+            'name': name,
+            'alias': alias,
+            'registered_at': now,
+            'updated_at': now,
+            'last_accessed': None,
+            'has_loki_dir': os.path.isdir(os.path.join(path, '.loki')),
+            'status': 'active',
+        }
+        print(f'Registered: {name}')
+    data['projects'] = projects
+    reg_dir = os.path.dirname(registry_file) or '.'
+    os.makedirs(reg_dir, exist_ok=True)
+    fd, tmp = tempfile.mkstemp(dir=reg_dir, prefix='.projects.', suffix='.tmp')
+    try:
+        with os.fdopen(fd, 'w') as f:
+            json.dump(data, f, indent=2)
+            f.flush()
+            os.fsync(f.fileno())
+        os.replace(tmp, registry_file)
+    except BaseException:
+        try:
+            os.unlink(tmp)
+        except OSError:
+            pass
+        raise
 
 print(f'  Path: {path}')
 if alias:
@@ -19958,34 +19990,69 @@ if alias:
                 exit 1
             fi
 
-            _REGISTRY_FILE="$registry_file" _IDENTIFIER="$identifier" python3 -c "
+            # Route through registry.unregister_project so the delete is
+            # serialized + atomic. Look the name up first to preserve the
+            # "Removed: {name}" output. Falls back to an atomic temp-file write
+            # if registry.py cannot be imported (never a truncating open).
+            _REGISTRY_FILE="$registry_file" _IDENTIFIER="$identifier" \
+            _REGISTRY_SKILL="${SKILL_DIR:-$_LOKI_SCRIPT_DIR/..}" python3 -c "
 import json
 import os
+import sys
+import tempfile
 
 registry_file = os.environ['_REGISTRY_FILE']
 identifier = os.environ['_IDENTIFIER']
 
-with open(registry_file, 'r') as f:
-    data = json.load(f)
-
-projects = data.get('projects', {})
-found_id = None
-
-for pid, project in projects.items():
-    if pid == identifier or project['path'] == identifier or project.get('alias') == identifier:
-        found_id = pid
-        break
+sys.path.insert(0, os.environ.get('_REGISTRY_SKILL', '.'))
+try:
+    from dashboard import registry
+except Exception:
+    registry = None
 
-if found_id:
-    name = projects[found_id]['name']
-    del projects[found_id]
-    data['projects'] = projects
-    with open(registry_file, 'w') as f:
-        json.dump(data, f, indent=2)
-    print(f'Removed: {name}')
+if registry is not None:
+    existing = registry.get_project(identifier)
+    if existing and registry.unregister_project(identifier):
+        print('Removed: ' + existing['name'])
+    else:
+        print(f'Not found: {identifier}')
+        sys.exit(1)
 else:
-    print(f'Not found: {identifier}')
-    exit(1)
+    # Fallback: atomic temp-file write if registry.py is unavailable.
+    try:
+        with open(registry_file, 'r') as f:
+            data = json.load(f)
+    except (OSError, json.JSONDecodeError):
+        data = {'version': '1.0', 'projects': {}}
+    projects = data.get('projects', {})
+    found_id = None
+    for pid, project in projects.items():
+        if pid == identifier or project['path'] == identifier or project.get('alias') == identifier:
+            found_id = pid
+            break
+    if found_id:
+        name = projects[found_id]['name']
+        del projects[found_id]
+        data['projects'] = projects
+        reg_dir = os.path.dirname(registry_file) or '.'
+        os.makedirs(reg_dir, exist_ok=True)
+        fd, tmp = tempfile.mkstemp(dir=reg_dir, prefix='.projects.', suffix='.tmp')
+        try:
+            with os.fdopen(fd, 'w') as f:
+                json.dump(data, f, indent=2)
+                f.flush()
+                os.fsync(f.fileno())
+            os.replace(tmp, registry_file)
+        except BaseException:
+            try:
+                os.unlink(tmp)
+            except OSError:
+                pass
+            raise
+        print(f'Removed: {name}')
+    else:
+        print(f'Not found: {identifier}')
+        sys.exit(1)
 "
             ;;
 
@@ -20051,87 +20118,119 @@ else:
             echo -e "${BOLD}Syncing Project Registry${NC}"
             echo ""
 
-            python3 -c "
+            # Route through registry.sync_registry_with_discovery so the
+            # discover->merge->save is serialized + atomic and uses the same
+            # sha256 ids as the rest of the registry. Reproduce the prior
+            # stdout (per-project "Added:" lines + summary) from its return
+            # value. Falls back to an atomic temp-file write if registry.py
+            # cannot be imported (never a truncating open).
+            _REGISTRY_FILE="$registry_file" \
+            _REGISTRY_SKILL="${SKILL_DIR:-$_LOKI_SCRIPT_DIR/..}" python3 -c "
 import json
 import os
+import sys
 import hashlib
+import tempfile
 from pathlib import Path
 from datetime import datetime, timezone
 
-registry_file = '$registry_file'
-home = Path.home()
-
-# Load registry
-with open(registry_file, 'r') as f:
-    data = json.load(f)
-projects = data.get('projects', {})
-
-# Discover projects
-search_paths = [
-    home / 'git',
-    home / 'projects',
-    home / 'code',
-    home / 'dev',
-    home / 'workspace',
-    home / 'src',
-]
+registry_file = os.environ['_REGISTRY_FILE']
 
-discovered = []
+sys.path.insert(0, os.environ.get('_REGISTRY_SKILL', '.'))
+try:
+    from dashboard import registry
+except Exception:
+    registry = None
 
-def search_dir(path, depth=0, max_depth=3):
-    if depth > max_depth:
-        return
+if registry is not None:
+    result = registry.sync_registry_with_discovery()
+    for project in result['details']['added']:
+        print(f\"  Added: {project['name']}\")
+    print('')
+    print(f\"Added: {result['added']}, Missing: {result['missing']}, Total: {result['total']}\")
+else:
+    # Fallback: atomic temp-file write if registry.py is unavailable.
+    home = Path.home()
     try:
-        if not path.is_dir():
-            return
-        loki_dir = path / '.loki'
-        if loki_dir.is_dir():
-            discovered.append(str(path))
-            return
-        for child in path.iterdir():
-            if child.is_dir() and not child.name.startswith('.'):
-                search_dir(child, depth + 1, max_depth)
-    except (PermissionError, OSError):
-        pass
-
-for search_path in search_paths:
-    if search_path.exists():
-        search_dir(search_path)
+        with open(registry_file, 'r') as f:
+            data = json.load(f)
+    except (OSError, json.JSONDecodeError):
+        data = {'version': '1.0', 'projects': {}}
+    projects = data.get('projects', {})
+    search_paths = [
+        home / 'git',
+        home / 'projects',
+        home / 'code',
+        home / 'dev',
+        home / 'workspace',
+        home / 'src',
+    ]
+    discovered = []
 
-# Add new projects
-added = 0
-now = datetime.now(timezone.utc).isoformat()
+    def search_dir(path, depth=0, max_depth=3):
+        if depth > max_depth:
+            return
+        try:
+            if not path.is_dir():
+                return
+            loki_dir = path / '.loki'
+            if loki_dir.is_dir():
+                discovered.append(str(path))
+                return
+            for child in path.iterdir():
+                if child.is_dir() and not child.name.startswith('.'):
+                    search_dir(child, depth + 1, max_depth)
+        except (PermissionError, OSError):
+            pass
 
-for path in discovered:
-    project_id = hashlib.md5(path.encode()).hexdigest()[:12]
-    if project_id not in projects:
-        projects[project_id] = {
-            'id': project_id,
-            'path': path,
-            'name': os.path.basename(path),
-            'alias': None,
-            'registered_at': now,
-            'updated_at': now,
-            'last_accessed': None,
-            'has_loki_dir': True,
-            'status': 'active',
-        }
-        added += 1
-        print(f'  Added: {os.path.basename(path)}')
+    for search_path in search_paths:
+        if search_path.exists():
+            search_dir(search_path)
+
+    added = 0
+    now = datetime.now(timezone.utc).isoformat()
+    for path in discovered:
+        project_id = hashlib.sha256(path.encode()).hexdigest()[:12]
+        if project_id not in projects:
+            projects[project_id] = {
+                'id': project_id,
+                'path': path,
+                'name': os.path.basename(path),
+                'alias': None,
+                'registered_at': now,
+                'updated_at': now,
+                'last_accessed': None,
+                'has_loki_dir': True,
+                'status': 'active',
+            }
+            added += 1
+            print(f'  Added: {os.path.basename(path)}')
 
-# Check for missing
-missing = 0
-for pid, project in list(projects.items()):
-    if not os.path.isdir(project['path']):
-        project['status'] = 'missing'
-        missing += 1
+    missing = 0
+    for pid, project in list(projects.items()):
+        if not os.path.isdir(project['path']):
+            project['status'] = 'missing'
+            missing += 1
 
-data['projects'] = projects
-with open(registry_file, 'w') as f:
-    json.dump(data, f, indent=2)
+    data['projects'] = projects
+    reg_dir = os.path.dirname(registry_file) or '.'
+    os.makedirs(reg_dir, exist_ok=True)
+    fd, tmp = tempfile.mkstemp(dir=reg_dir, prefix='.projects.', suffix='.tmp')
+    try:
+        with os.fdopen(fd, 'w') as f:
+            json.dump(data, f, indent=2)
+            f.flush()
+            os.fsync(f.fileno())
+        os.replace(tmp, registry_file)
+    except BaseException:
+        try:
+            os.unlink(tmp)
+        except OSError:
+            pass
+        raise
 
-print('')
-print(f'Added: {added}, Missing: {missing}, Total: {len(projects)}')
+    print('')
+    print(f'Added: {added}, Missing: {missing}, Total: {len(projects)}')
 " 2>/dev/null
             ;;
 
@@ -22546,11 +22645,18 @@ _context_add() {
         local loki_dir="${LOKI_DIR:-.loki}"
         mkdir -p "$loki_dir/state"
         local ctx_files="$loki_dir/state/context-files.json"
-        python3 -c "
+        # Pass values via env vars (not string interpolation) so a filename
+        # with an apostrophe or other special char cannot break the python
+        # source (was a swallowed SyntaxError -> set -e abort -> file silently
+        # not added). Matches the safe pattern used by the registry commands.
+        _CTX_PATH="$file_path" _CTX_TOKENS="$est_tokens" _CTX_SIZE="$size" \
+        _CTX_LINES="$lines" _CTX_FILE="$ctx_files" python3 -c "
 import json, os
-path = '$file_path'
-tokens = $est_tokens
-ctx_file = '$ctx_files'
+path = os.environ['_CTX_PATH']
+tokens = int(os.environ['_CTX_TOKENS'])
+ctx_file = os.environ['_CTX_FILE']
+size = int(os.environ['_CTX_SIZE'])
+lines = int(os.environ['_CTX_LINES'])
 try:
     with open(ctx_file) as f:
         files = json.load(f)
@@ -22558,7 +22664,7 @@ except:
     files = []
 # Avoid duplicates
 files = [f for f in files if f.get('path') != path]
-files.append({'path': path, 'estimated_tokens': tokens, 'size': $size, 'lines': $lines})
+files.append({'path': path, 'estimated_tokens': tokens, 'size': size, 'lines': lines})
 with open(ctx_file, 'w') as f:
     json.dump(files, f, indent=2)
 " 2>/dev/null
@@ -29753,7 +29859,7 @@ cmd_docker() {
     local -a fwd=()
     while [ $# -gt 0 ]; do
         case "$1" in
-            --image) shift; export LOKI_DOCKER_IMAGE="${1:-}"; shift ;;
+            --image) [ $# -ge 2 ] && { shift; export LOKI_DOCKER_IMAGE="$1"; } || { echo "loki docker --image requires a value" >&2; return 1; }; shift ;;
             --dry-run) dry_run=1; shift ;;
             --api) with_api=1; fwd+=("$1"); shift ;;
             *) fwd+=("$1"); shift ;;

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.73.0"
+__version__ = "7.74.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v7.73.0
+**Version:** v7.74.0
 
 ---
 
@@ -395,7 +395,7 @@ provider works inside the container. Provide auth with your Anthropic API key:
 # Run Loki Mode in Docker (Claude provider, API-key auth)
 docker run --rm -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -v $(pwd):/workspace -w /workspace \
-  asklokesh/loki-mode:7.73.0 start ./my-spec.md
+  asklokesh/loki-mode:7.74.0 start ./my-spec.md
 ```
 
 ##### docker compose + .env (no host install)

package/loki-ts/data/finding-schema.json

@@ -10,6 +10,7 @@
     "findings": {
       "type": "array",
       "minItems": 1,
+      "description": "One finding per dispatched council voter. minItems is intentionally kept at 1 because this schema is SHARED with non-council consumers (loki-ts council.ts validateFinding and loki_finding_schema_path). It is NOT raised to the council size, since doing so would break those consumers. The real quorum gate lives in autonomy/lib/voter-agents.sh: the embedded parser judges the verdict against the EXPECTED council size (COUNCIL_SIZE) and forces CONTINUE when fewer voters respond than expected (fail closed). completion-council.sh additionally asserts full quorum (total_members == COUNCIL_SIZE) before honoring a COMPLETE verdict. WAVE13: a degraded response that returns fewer findings than the council size can NEVER produce COMPLETE.",
       "items": {
         "type": "object",
         "additionalProperties": false,