loki-mode 7.94.0 → 7.96.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.94.0
+# Loki Mode v7.96.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.94.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.96.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.94.0
+7.96.0

package/autonomy/hooks/migration-hooks.sh

@@ -348,6 +348,19 @@ hook_pre_healing_modify() {
     [[ "${LOKI_HEAL_MODE:-false}" != "true" ]] && return 0
     [[ -z "$file_path" ]] && return 0
 
+    # Fail CLOSED if the friction map is absent. Without it the friction safety
+    # gate below cannot run, so deleting (or never producing) friction-map.json
+    # would otherwise BYPASS protection and let unclassified institutional
+    # knowledge be destroyed -- and _heal_snapshot_save would still run, masking
+    # the gap. The map is produced by the archaeology phase (the phase gate
+    # blocks archaeology -> stabilize until friction-map.json has >=1 entry), so
+    # any modify in stabilize/isolate/modernize legitimately has one. Block
+    # before any friction check or snapshot proceeds.
+    if [[ ! -f "$heal_dir/friction-map.json" ]]; then
+        echo "HOOK_BLOCKED: friction-map.json missing at ${heal_dir}/friction-map.json. Run the archaeology phase first (loki heal <path> --phase archaeology) to catalog friction before modifying files in healing mode."
+        return 1
+    fi
+
     # Check if file has friction points
     if [[ -f "$heal_dir/friction-map.json" ]]; then
         local blocked

package/autonomy/run.sh

@@ -17150,6 +17150,30 @@ else:
             if [ "$_completion_claimed" = 1 ] && type ensure_completion_test_evidence &>/dev/null; then
                 ensure_completion_test_evidence || true
             fi
+            # TRUST MOAT (fail-CLOSED): each completion gate below is armed only
+            # when its function is loadable (`type fn && ! fn`). If the council
+            # library failed to source, those `type` probes are FALSE, so every
+            # gate arm is silently skipped and a completion claim sails straight to
+            # the accept branch UNVERIFIED -- a fake-green. Before the gate chain,
+            # verify the core gate functions exist; if any is missing, the library
+            # is incomplete and we CANNOT verify completion, so we refuse the claim
+            # (force another iteration) rather than pass ungated. This never fires
+            # in a healthy install (functions are sourced) and only triggers on a
+            # genuinely broken/partial load -- exactly when failing open is unsafe.
+            if [ "$_completion_claimed" = 1 ]; then
+                _gates_loadable=1
+                for _gate_fn in council_checklist_gate council_evidence_gate council_heldout_gate council_assumption_ledger_gate; do
+                    if ! type "$_gate_fn" &>/dev/null; then
+                        log_error "Completion gate unavailable: ${_gate_fn} (council library incomplete or failed to load)."
+                        _gates_loadable=0
+                    fi
+                done
+                if [ "$_gates_loadable" -eq 0 ]; then
+                    log_error "Cannot verify completion: required council gates are missing. Refusing the completion claim (fail-closed) and continuing to iterate."
+                    _completion_claimed=0
+                fi
+                unset _gates_loadable _gate_fn
+            fi
             if [ -n "$_gate_block_for_completion" ] && [ "$_completion_claimed" = 1 ]; then
                 log_warn "Completion claim rejected: code review is BLOCKED for this iteration (Critical/High findings). Fix review issues before completion."
                 log_warn "  Review details under .loki/quality/reviews/ ; gate_failures=${gate_failures}"
@@ -17749,7 +17773,24 @@ check_human_intervention() {
         if type ensure_completion_test_evidence &>/dev/null; then
             ensure_completion_test_evidence || true
         fi
-        if type council_checklist_gate &>/dev/null && ! council_checklist_gate; then
+        # TRUST MOAT (fail-CLOSED, parity with the default route ~17153): each gate
+        # arm below is `type fn && ! fn`, so a missing gate fn (council library
+        # failed to source) silently skips that gate and the chain can reach
+        # council_vote and force-approve completion UNGATED -- a fake-green. Probe
+        # the core gate fns first; if any is missing, refuse the force-review
+        # approval and fall through to continue iterating. No-op on healthy loads.
+        _frgate_loadable=1
+        for _frgate_fn in council_checklist_gate council_evidence_gate council_heldout_gate council_assumption_ledger_gate; do
+            if ! type "$_frgate_fn" &>/dev/null; then
+                log_error "Council force-review: gate unavailable: ${_frgate_fn} (council library incomplete)."
+                _frgate_loadable=0
+            fi
+        done
+        if [ "$_frgate_loadable" -eq 0 ]; then
+            log_error "Council force-review: required gates missing; refusing force approval (fail-closed)."
+            unset _frgate_loadable _frgate_fn
+        elif type council_checklist_gate &>/dev/null && ! council_checklist_gate; then
+            unset _frgate_loadable _frgate_fn
             log_info "Council force-review: blocked by checklist hard gate"
         elif type council_evidence_gate &>/dev/null && ! _evidence_gate_and_surface; then
             log_info "Council force-review: blocked by evidence hard gate"

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.94.0"
+__version__ = "7.96.0"
 
 # Expose the control app for easy import
 try: