loki-mode 7.95.0 → 7.96.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v7.95.0
+# Loki Mode v7.96.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -408,4 +408,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v7.95.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**
+**v7.96.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~260 lines core**

package/VERSION

@@ -1 +1 @@
-7.95.0
+7.96.0

package/autonomy/hooks/migration-hooks.sh

@@ -348,6 +348,19 @@ hook_pre_healing_modify() {
     [[ "${LOKI_HEAL_MODE:-false}" != "true" ]] && return 0
     [[ -z "$file_path" ]] && return 0
 
+    # Fail CLOSED if the friction map is absent. Without it the friction safety
+    # gate below cannot run, so deleting (or never producing) friction-map.json
+    # would otherwise BYPASS protection and let unclassified institutional
+    # knowledge be destroyed -- and _heal_snapshot_save would still run, masking
+    # the gap. The map is produced by the archaeology phase (the phase gate
+    # blocks archaeology -> stabilize until friction-map.json has >=1 entry), so
+    # any modify in stabilize/isolate/modernize legitimately has one. Block
+    # before any friction check or snapshot proceeds.
+    if [[ ! -f "$heal_dir/friction-map.json" ]]; then
+        echo "HOOK_BLOCKED: friction-map.json missing at ${heal_dir}/friction-map.json. Run the archaeology phase first (loki heal <path> --phase archaeology) to catalog friction before modifying files in healing mode."
+        return 1
+    fi
+
     # Check if file has friction points
     if [[ -f "$heal_dir/friction-map.json" ]]; then
         local blocked

package/autonomy/run.sh

@@ -17773,7 +17773,24 @@ check_human_intervention() {
         if type ensure_completion_test_evidence &>/dev/null; then
             ensure_completion_test_evidence || true
         fi
-        if type council_checklist_gate &>/dev/null && ! council_checklist_gate; then
+        # TRUST MOAT (fail-CLOSED, parity with the default route ~17153): each gate
+        # arm below is `type fn && ! fn`, so a missing gate fn (council library
+        # failed to source) silently skips that gate and the chain can reach
+        # council_vote and force-approve completion UNGATED -- a fake-green. Probe
+        # the core gate fns first; if any is missing, refuse the force-review
+        # approval and fall through to continue iterating. No-op on healthy loads.
+        _frgate_loadable=1
+        for _frgate_fn in council_checklist_gate council_evidence_gate council_heldout_gate council_assumption_ledger_gate; do
+            if ! type "$_frgate_fn" &>/dev/null; then
+                log_error "Council force-review: gate unavailable: ${_frgate_fn} (council library incomplete)."
+                _frgate_loadable=0
+            fi
+        done
+        if [ "$_frgate_loadable" -eq 0 ]; then
+            log_error "Council force-review: required gates missing; refusing force approval (fail-closed)."
+            unset _frgate_loadable _frgate_fn
+        elif type council_checklist_gate &>/dev/null && ! council_checklist_gate; then
+            unset _frgate_loadable _frgate_fn
             log_info "Council force-review: blocked by checklist hard gate"
         elif type council_evidence_gate &>/dev/null && ! _evidence_gate_and_surface; then
             log_info "Council force-review: blocked by evidence hard gate"

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "7.95.0"
+__version__ = "7.96.0"
 
 # Expose the control app for easy import
 try: