loki-mode 9.22.7 → 9.22.9

package/README.md

@@ -101,12 +101,17 @@ object instead of terminal text:
 
 ```bash
 loki quickstart "a todo app with user accounts" --dry-run --json > preview.json
+loki quickstart --verify-preview preview.json --json
 loki quickstart --from-preview preview.json --yes
 ```
 
 The object contains the input kind, deterministic selected template (or `null`
 for an existing PRD), the exact estimator response under `plan`, and a bounded
 continuation containing the exact idea/template or the PRD path and SHA-256.
+`--verify-preview` validates the same bounded duplicate-key-rejecting schema and
+requires either a currently shipped idea template or the unchanged digest-bound
+PRD, while emitting no idea or PRD path. It accepts a file or piped stdin and
+returns before provider discovery, estimation, writes, or build execution.
 `--from-preview` requires explicit argv `--yes`, rejects malformed, conflicting,
 symlinked, or changed inputs before provider and build boundaries, then uses the
 existing no-clobber quickstart path. The saved plan is evidence rather than

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.22.7
+# Loki Mode v9.22.9
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.22.7 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.22.9 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.22.7
+9.22.9

package/autonomy/lib/gate_policy.py

@@ -0,0 +1,66 @@
+#!/usr/bin/env python3
+"""Read-only quality-gate policy reporting for CLI and dashboard consumers."""
+
+import json
+import os
+
+SCHEMA_VERSION = 1
+
+PROMOTABLE = {
+    "magic_debate": ("LOKI_GATE_MAGIC_DEBATE_BLOCKING", "true", "spec-vs-implementation debate"),
+    "test_coverage": ("LOKI_COV_ENFORCE", "1", "project test runner pass/fail"),
+    "policy_approval": ("LOKI_POLICY_APPROVAL_ENFORCE", "1", "staged-autonomy approval policy"),
+}
+
+ALWAYS_BLOCKING = {
+    "static_analysis": "static-analysis findings on the diff",
+    "code_review": "blind review Critical/High findings",
+    "mock_integrity": "tautological assertions and excessive mocking",
+    "mutation_integrity": "test-fitting assertion churn",
+}
+
+
+def _counts(loki_dir):
+    path = os.path.join(loki_dir, "quality", "gate-failure-count.json")
+    try:
+        with open(path, encoding="utf-8") as handle:
+            data = json.load(handle)
+        return data if isinstance(data, dict) else None
+    except (OSError, ValueError):
+        return None
+
+
+def assess(loki_dir=".loki", env=None):
+    """Return policy without mutating files or environment.
+
+    `audit_hits` remains null when the ledger is absent or malformed. Reporting
+    zero there would falsely claim the gate ran and never fired.
+    """
+    env = os.environ if env is None else env
+    counts = _counts(loki_dir)
+    gates = []
+    for name, why in sorted(ALWAYS_BLOCKING.items()):
+        gates.append({
+            "gate": name,
+            "mode": "blocking",
+            "promotable": False,
+            "audit_hits": counts.get(name) if counts is not None else None,
+            "why": why,
+            "promote_with": None,
+        })
+    for name, (variable, value, why) in sorted(PROMOTABLE.items()):
+        enabled = str(env.get(variable, "")).strip().lower() in ("1", "true", "yes")
+        gates.append({
+            "gate": name,
+            "mode": "blocking" if enabled else "advisory",
+            "promotable": True,
+            "audit_hits": counts.get(name) if counts is not None else None,
+            "why": why,
+            "promote_with": None if enabled else f"{variable}={value}",
+        })
+    return {
+        "schema_version": SCHEMA_VERSION,
+        "status": "measured",
+        "ledger": "present" if counts is not None else "absent",
+        "gates": gates,
+    }

package/autonomy/quickstart.sh

@@ -509,21 +509,29 @@ json.dump(payload, sys.stdout, separators=(",", ":"), sort_keys=True)
 # cmd_quickstart always recomputes and displays the current estimator result.
 _qs_load_preview() {
     local preview_path="$1"
-    if [ ! -f "$preview_path" ] || [ ! -r "$preview_path" ] || [ -L "$preview_path" ]; then
-        printf 'Preview path is not a readable regular non-symlink file: %s\n' "$preview_path" >&2
-        return 2
-    fi
-    local preview_size
-    preview_size=$(wc -c < "$preview_path" 2>/dev/null | tr -d '[:space:]') || return 2
-    case "$preview_size" in
-        ""|*[!0-9]*) return 2;;
-    esac
-    if [ "$preview_size" -eq 0 ] || [ "$preview_size" -gt 1048576 ]; then
-        printf 'Preview JSON must be between 1 byte and 1 MiB.\n' >&2
-        return 2
+    if [ "$preview_path" = "-" ]; then
+        if [ -t 0 ]; then
+            printf 'Preview stdin must be piped; refusing to wait on a terminal.\n' >&2
+            return 2
+        fi
+    else
+        if [ ! -f "$preview_path" ] || [ ! -r "$preview_path" ] || [ -L "$preview_path" ]; then
+            printf 'Preview path is not a readable regular non-symlink file: %s\n' "$preview_path" >&2
+            return 2
+        fi
+        local preview_size
+        preview_size=$(wc -c < "$preview_path" 2>/dev/null | tr -d '[:space:]') || return 2
+        case "$preview_size" in
+            ""|*[!0-9]*) return 2;;
+        esac
+        if [ "$preview_size" -eq 0 ] || [ "$preview_size" -gt 1048576 ]; then
+            printf 'Preview JSON must be between 1 byte and 1 MiB.\n' >&2
+            return 2
+        fi
     fi
 
-    python3 - "$preview_path" <<'PY'
+    local validator_code=""
+    validator_code=$(cat <<'PY'
 import base64
 import json
 import os
@@ -533,15 +541,20 @@ import sys
 
 path = sys.argv[1]
 try:
-    flags = os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0)
-    descriptor = os.open(path, flags)
-    try:
-        metadata = os.fstat(descriptor)
-        if not stat.S_ISREG(metadata.st_mode) or metadata.st_size < 1 or metadata.st_size > 1048576:
-            raise ValueError("unsafe preview")
-        raw = os.read(descriptor, 1048577)
-    finally:
-        os.close(descriptor)
+    if path == "-":
+        raw = sys.stdin.buffer.read(1048577)
+        if len(raw) < 1 or len(raw) > 1048576:
+            raise ValueError("unsafe preview stdin")
+    else:
+        flags = os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0)
+        descriptor = os.open(path, flags)
+        try:
+            metadata = os.fstat(descriptor)
+            if not stat.S_ISREG(metadata.st_mode) or metadata.st_size < 1 or metadata.st_size > 1048576:
+                raise ValueError("unsafe preview")
+            raw = os.read(descriptor, 1048577)
+        finally:
+            os.close(descriptor)
     if len(raw) > 1048576:
         raise ValueError("oversized")
     def reject_duplicate_keys(pairs):
@@ -606,6 +619,88 @@ elif kind == "prd":
 else:
     sys.exit(2)
 PY
+)
+    python3 -c "$validator_code" "$preview_path"
+}
+
+# _qs_verify_preview <path> <json>: prove that one bounded schema-v1 preview is
+# still actionable without crossing provider, estimator, PRD-write, or build
+# boundaries. Idea previews must name a currently shipped template. PRD
+# previews must still resolve to the exact readable non-symlink file digest.
+# Output deliberately excludes the idea and PRD path.
+_qs_verify_preview() {
+    local preview_path="$1" json_output="${2:-false}"
+    local fields="" kind="" template="" encoded="" digest="" value=""
+    fields=$(_qs_load_preview "$preview_path") || {
+        printf 'Preview JSON is malformed or incompatible.\n' >&2
+        return 2
+    }
+    IFS='|' read -r kind template encoded digest <<< "$fields"
+    value=$(python3 -c 'import base64,sys; sys.stdout.buffer.write(base64.b64decode(sys.argv[1], validate=True))' "$encoded" 2>/dev/null) || {
+        printf 'Preview JSON continuation is invalid.\n' >&2
+        return 2
+    }
+    [ -n "$value" ] || {
+        printf 'Preview JSON continuation is empty.\n' >&2
+        return 2
+    }
+
+    local verdict=""
+    if [ "$kind" = "idea" ]; then
+        if ! _qs_template_exists "$template"; then
+            printf 'Preview template is not currently shipped: %s\n' "$template" >&2
+            return 2
+        fi
+        verdict="SHIPPED_TEMPLATE_MATCH"
+    elif [ "$kind" = "prd" ]; then
+        if [ ! -f "$value" ] || [ ! -r "$value" ] || [ -L "$value" ]; then
+            printf 'Preview PRD is not a readable regular non-symlink file.\n' >&2
+            return 2
+        fi
+        local current_digest=""
+        current_digest=$(shasum -a 256 "$value" 2>/dev/null | awk '{print $1}') || current_digest=""
+        if [ -z "$current_digest" ] || [ "$current_digest" != "$digest" ]; then
+            printf 'Preview PRD has changed since the saved preview; run --dry-run --json again.\n' >&2
+            return 2
+        fi
+        verdict="EXACT_PRD_MATCH"
+    else
+        printf 'Preview JSON continuation kind is unsupported.\n' >&2
+        return 2
+    fi
+
+    if [ "$json_output" = true ]; then
+        python3 - "$kind" "$template" "$digest" "$verdict" <<'PY'
+import json
+import sys
+
+kind, template, digest, verdict = sys.argv[1:5]
+json.dump(
+    {
+        "command": "loki quickstart",
+        "input_kind": kind,
+        "mode": "verify-preview",
+        "prd_sha256": digest if kind == "prd" else None,
+        "schema_version": 1,
+        "selected_template": template if kind == "idea" else None,
+        "valid": True,
+        "verdict": verdict,
+    },
+    sys.stdout,
+    separators=(",", ":"),
+    sort_keys=True,
+)
+sys.stdout.write("\n")
+PY
+        return $?
+    fi
+
+    if [ "$kind" = "idea" ]; then
+        printf 'VERIFIED / %s / template=%s\n' "$verdict" "$template"
+    else
+        printf 'VERIFIED / %s / sha256=%s\n' "$verdict" "$digest"
+    fi
+    return 0
 }
 
 # _qs_help: concise usage for `loki quickstart --help`.
@@ -624,8 +719,9 @@ _qs_help() {
     printf 'Options:\n'
     printf '  --yes, -y     Auto-confirm the final build prompt (still shows the plan)\n'
     printf '  --dry-run     Preview the selected template and plan; write/start nothing\n'
-    printf '  --json        With --dry-run, emit one machine-readable JSON object\n'
-    printf '  --from-preview F  Continue a saved JSON preview; requires explicit --yes\n'
+    printf '  --json        Emit machine-readable output for a read-only command\n'
+    printf '  --from-preview F  Continue saved JSON from file F (or - for piped stdin); requires --yes\n'
+    printf '  --verify-preview F  Verify saved JSON from file F (or - for piped stdin); executes nothing\n'
     printf '  --template N  Use the exact shipped template N for an IDEA\n'
     printf '  --list-templates  List every shipped template and its purpose\n'
     printf '  --help, -h    Show this help and exit\n'
@@ -644,6 +740,8 @@ _qs_help() {
     printf '  no file is written, and no build is started. Do not combine with --yes.\n'
     printf '  Add --json for versioned JSON only; --json requires --dry-run.\n'
     printf '  Save that JSON, then continue it with --from-preview FILE --yes.\n'
+    printf '  Or pipe it with --from-preview - --yes; terminal stdin is refused.\n'
+    printf '  Verify it without execution using --verify-preview FILE (and optional --json).\n'
     printf '\n'
     printf 'Steps:\n'
     printf '  1. Setup      Check for an AI provider for execution (skipped in preview)\n'
@@ -681,6 +779,8 @@ cmd_quickstart() {
     local list_templates_flag_seen=false
     local from_preview=""
     local from_preview_flag_seen=false
+    local verify_preview=""
+    local verify_preview_flag_seen=false
     local preview_prd_digest=""
     if _qs_assume_yes; then assume_yes=true; fi
 
@@ -749,6 +849,19 @@ cmd_quickstart() {
                 from_preview="$2"
                 shift 2
                 ;;
+            --verify-preview)
+                if [ "$verify_preview_flag_seen" = true ]; then
+                    printf '%s--verify-preview may be specified only once.%s\n' "$_QS_RED" "$_QS_NC" >&2
+                    exit 2
+                fi
+                verify_preview_flag_seen=true
+                if [ $# -lt 2 ] || [ -z "${2:-}" ] || [[ "${2:-}" == --* ]]; then
+                    printf '%s--verify-preview requires a preview JSON path.%s\n' "$_QS_RED" "$_QS_NC" >&2
+                    exit 2
+                fi
+                verify_preview="$2"
+                shift 2
+                ;;
             --*)
                 printf '%sUnknown option: %s%s\n' "$_QS_RED" "$1" "$_QS_NC" >&2
                 printf "Run 'loki quickstart --help' for usage.\n" >&2
@@ -767,6 +880,18 @@ cmd_quickstart() {
         esac
     done
 
+    # Verification is a standalone read-only shape. It accepts only optional
+    # JSON formatting, validates the full current continuation boundary, and
+    # returns before terminal, provider, estimator, PRD-write, and build seams.
+    if [ "$verify_preview_flag_seen" = true ]; then
+        if [ -n "$positional" ] || [ "$yes_flag" = true ] || [ "$dry_run" = true ] || [ "$template_flag_seen" = true ] || [ "$list_templates" = true ] || [ "$from_preview_flag_seen" = true ]; then
+            printf '%s--verify-preview accepts only a preview JSON path and optional --json.%s\n' "$_QS_RED" "$_QS_NC" >&2
+            exit 2
+        fi
+        _qs_verify_preview "$verify_preview" "$json_output"
+        return $?
+    fi
+
     # Continuation is a standalone execution shape. Explicit argv consent is
     # mandatory, and no caller-supplied input or selector may compete with the
     # reviewed preview. Validation happens before every provider, estimator,

package/autonomy/run.sh

@@ -1709,12 +1709,15 @@ fi
 if [ "$BASH_VERSION_MAJOR" -ge 4 ] 2>/dev/null; then
     declare -A WORKTREE_PIDS=()
     declare -A WORKTREE_PATHS=()
+    declare -A WORKTREE_BASE_SHAS=()
 else
     # Fallback: parallel mode will check and warn
     # shellcheck disable=SC2178
     WORKTREE_PIDS=""
     # shellcheck disable=SC2178
     WORKTREE_PATHS=""
+    # shellcheck disable=SC2178
+    WORKTREE_BASE_SHAS=""
 fi
 # Track background install PIDs for cleanup (indexed array, works on all bash versions)
 WORKTREE_INSTALL_PIDS=()
@@ -5184,6 +5187,81 @@ ${_del_receipt}"
 # Parallel Workflow Functions (Git Worktrees)
 #===============================================================================
 
+# Production bridge for the Bun execution-manifest intelligence. The feature is
+# explicitly opt-in; with LOKI_EXEC_MANIFEST unset this performs no I/O and the
+# legacy parallel workflow remains byte-for-byte on its old path.
+_loki_exec_manifest() {
+    [ "${LOKI_EXEC_MANIFEST:-0}" = "1" ] || return 0
+    bun "${SCRIPT_DIR}/../loki-ts/dist/loki.js" internal exec-manifest "$@"
+}
+
+init_exec_manifest() {
+    [ "${LOKI_EXEC_MANIFEST:-0}" = "1" ] || return 0
+    local base_sha plan_file
+    # create_worktree's built-in streams branch from main (with HEAD only as its
+    # final fallback), so the manifest must pin that exact production base.
+    base_sha=$(git -C "$TARGET_DIR" rev-parse main 2>/dev/null) || \
+        base_sha=$(git -C "$TARGET_DIR" rev-parse HEAD 2>/dev/null) || return 1
+    mkdir -p "${TARGET_DIR}/.loki"
+    plan_file=$(mktemp "${TARGET_DIR}/.loki/.exec-manifest-plan.XXXXXX") || return 1
+    LOKI_PLAN_FILE="$plan_file" LOKI_BASE_SHA="$base_sha" \
+      LOKI_PARALLEL_TESTING_VALUE="$PARALLEL_TESTING" \
+      LOKI_PARALLEL_DOCS_VALUE="$PARALLEL_DOCS" \
+      LOKI_PARALLEL_BLOG_VALUE="$PARALLEL_BLOG" python3 <<'PY'
+import json, os
+streams = []
+if os.environ["LOKI_PARALLEL_TESTING_VALUE"] == "true":
+    streams.append({"name": "testing", "paths": ["tests", "loki-ts/tests"],
+                    "acceptance": "test stream exits successfully"})
+if os.environ["LOKI_PARALLEL_DOCS_VALUE"] == "true":
+    streams.append({"name": "docs", "paths": ["docs", "README.md", "CHANGELOG.md"],
+                    "acceptance": "documentation stream exits successfully"})
+if os.environ["LOKI_PARALLEL_BLOG_VALUE"] == "true":
+    streams.append({"name": "blog", "paths": ["blog"],
+                    "acceptance": "blog stream exits successfully"})
+with open(os.environ["LOKI_PLAN_FILE"], "w") as f:
+    json.dump({"baseSha": os.environ["LOKI_BASE_SHA"],
+               "integrationOwner": "parallel-orchestrator",
+               "streams": streams,
+               "env": {"LOKI_EXEC_MANIFEST": "1"}}, f)
+PY
+    _loki_exec_manifest plan "$plan_file" "${TARGET_DIR}/.loki" >/dev/null
+    local rc=$?
+    rm -f "$plan_file"
+    return "$rc"
+}
+
+validate_exec_manifest_result() {
+    local stream_name="$1" branch="$2"
+    [ "${LOKI_EXEC_MANIFEST:-0}" = "1" ] || return 0
+    local base_sha result_file
+    base_sha="${WORKTREE_BASE_SHAS[$stream_name]:-}"
+    [ -n "$base_sha" ] || base_sha=$(git -C "$TARGET_DIR" merge-base "$branch" HEAD 2>/dev/null) || return 1
+    result_file=$(mktemp "${TARGET_DIR}/.loki/.exec-manifest-result.XXXXXX") || return 1
+    LOKI_RESULT_FILE="$result_file" LOKI_RESULT_STREAM="$stream_name" \
+      LOKI_RESULT_BASE="$base_sha" LOKI_RESULT_BRANCH="$branch" \
+      LOKI_RESULT_REPO="$TARGET_DIR" python3 <<'PY'
+import json, os, subprocess
+paths = subprocess.check_output(
+    ["git", "-C", os.environ["LOKI_RESULT_REPO"], "diff", "--name-only",
+     f'{os.environ["LOKI_RESULT_BASE"]}..{os.environ["LOKI_RESULT_BRANCH"]}'],
+    text=True).splitlines()
+with open(os.environ["LOKI_RESULT_FILE"], "w") as f:
+    json.dump({"name": os.environ["LOKI_RESULT_STREAM"],
+               "baseSha": os.environ["LOKI_RESULT_BASE"],
+               "changedPaths": paths, "acceptanceMet": True}, f)
+PY
+    local outcome rc=0
+    outcome=$(_loki_exec_manifest validate "$result_file" "${TARGET_DIR}/.loki" 2>&1) || rc=$?
+    rm -f "$result_file"
+    if [ "$rc" -ne 0 ]; then
+        log_error "Execution manifest rejected $stream_name: $outcome"
+        return 1
+    fi
+    log_info "Execution manifest accepted: $stream_name"
+    return 0
+}
+
 # Check if parallel mode is supported (bash 4+ required for associative arrays)
 check_parallel_support() {
     if [ "$BASH_VERSION_MAJOR" -lt 4 ] 2>/dev/null; then
@@ -5211,6 +5289,9 @@ create_worktree() {
     if [ -d "$worktree_path" ]; then
         log_info "Worktree already exists: $stream_name"
         WORKTREE_PATHS[$stream_name]="$worktree_path"
+        if [ "${LOKI_EXEC_MANIFEST:-0}" = "1" ]; then
+            WORKTREE_BASE_SHAS[$stream_name]="$(python3 -c "import json; print(json.load(open('${TARGET_DIR}/.loki/manifest/exec-manifest.json'))['base_sha'])" 2>/dev/null)"
+        fi
         return 0
     fi
 
@@ -5231,6 +5312,7 @@ create_worktree() {
 
     if [ $wt_exit -eq 0 ]; then
         WORKTREE_PATHS[$stream_name]="$worktree_path"
+        WORKTREE_BASE_SHAS[$stream_name]="$(git -C "$worktree_path" rev-parse HEAD 2>/dev/null)"
 
         # Copy .loki state to worktree
         if [ -d "$TARGET_DIR/.loki" ]; then
@@ -5304,6 +5386,7 @@ remove_worktree() {
 
     unset "WORKTREE_PATHS[$stream_name]"
     unset "WORKTREE_PIDS[$stream_name]"
+    unset "WORKTREE_BASE_SHAS[$stream_name]"
 
     log_info "Removed worktree: $stream_name"
 }
@@ -5609,6 +5692,12 @@ merge_worktree() {
 
     log_step "Merging worktree: $stream_name (branch: $branch)"
 
+    # Validate the actual branch result at the integration seam, immediately
+    # before any checkout or merge can mutate the integration tree.
+    if ! validate_exec_manifest_result "$stream_name" "$branch"; then
+        return 1
+    fi
+
     # BUG-PAR-009: Verify git checkout main before merge
     local current_branch
     current_branch=$(git -C "${TARGET_DIR:-.}" branch --show-current 2>/dev/null)
@@ -5797,8 +5886,25 @@ merge_feature() {
     local clean_feature="${feature#feature-}"
     local branch="feature/$clean_feature"
 
+    # The session signal is authoritative for worktree branches (for example
+    # parallel-testing). The historical feature/<name> convention remains the
+    # fallback for legacy feature streams.
+    local _mf_signal="$TARGET_DIR/.loki/signals/MERGE_REQUESTED_$feature"
+    if [ -f "$_mf_signal" ]; then
+        local _mf_branch=""
+        _mf_branch=$(LOKI_SIGNAL_FILE="$_mf_signal" python3 -c \
+            "import json,os; print(json.load(open(os.environ['LOKI_SIGNAL_FILE'])).get('branch',''))" 2>/dev/null || true)
+        [ -n "$_mf_branch" ] && branch="$_mf_branch"
+    fi
+
     log_step "Merging feature: $clean_feature"
 
+    # This is the autonomous orchestrator's real integration seam. Reject a
+    # stale, out-of-scope, unknown, or unsuccessful stream before checkout/merge.
+    if ! validate_exec_manifest_result "$feature" "$branch"; then
+        return 1
+    fi
+
     # BUG-PAR-011: Ensure we're on main using git -C (no subshell)
     git -C "$TARGET_DIR" checkout main 2>/dev/null
 
@@ -5847,6 +5953,11 @@ init_parallel_streams() {
 
     log_header "Initializing Parallel Workflows"
 
+    if ! init_exec_manifest; then
+        log_error "Failed to initialize execution manifest"
+        return 1
+    fi
+
     local active_streams=0
 
     # Create testing worktree (always tracks main)

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.22.7"
+__version__ = "9.22.9"
 
 # Expose the control app for easy import
 try:

package/dashboard/server.py

@@ -8361,6 +8361,61 @@ async def get_trust_trajectory():
     return traj
 
 
+# Gate policy is derived in one deterministic module so the dashboard never
+# invents whether a gate blocks or whether an absent measurement means zero.
+_GATE_POLICY_MODULE = None
+
+
+def _load_gate_policy_module():
+    global _GATE_POLICY_MODULE
+    if _GATE_POLICY_MODULE is not None:
+        return _GATE_POLICY_MODULE
+    repo_root = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+    module_path = os.path.join(repo_root, "autonomy", "lib", "gate_policy.py")
+    if not os.path.isfile(module_path):
+        return None
+    try:
+        import importlib.util as importlib_util
+
+        spec = importlib_util.spec_from_file_location("gate_policy", module_path)
+        if spec is None or spec.loader is None:
+            return None
+        module = importlib_util.module_from_spec(spec)
+        spec.loader.exec_module(module)
+        _GATE_POLICY_MODULE = module
+        return module
+    except Exception:
+        return None
+
+
+@app.get("/api/gate-policy", dependencies=[Depends(auth.require_scope("read"))])
+async def get_gate_policy():
+    """Report blocking/advisory policy; never promote or mutate a gate."""
+    module = _load_gate_policy_module()
+    if module is None:
+        return {
+            "schema_version": 1,
+            "available": False,
+            "status": "unavailable",
+            "ledger": "absent",
+            "gates": [],
+            "error": "gate_policy module not found",
+        }
+    try:
+        result = module.assess(str(_get_loki_dir()))
+    except Exception as error:
+        return {
+            "schema_version": 1,
+            "available": False,
+            "status": "unavailable",
+            "ledger": "absent",
+            "gates": [],
+            "error": f"gate policy assessment failed: {error}",
+        }
+    result["available"] = True
+    return result
+
+
 # =============================================================================
 # Pricing API
 # =============================================================================

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.8.1
+**Version:** v9.22.9
 
 ---
 
@@ -194,6 +194,18 @@ Use `--dry-run` instead of `--yes` to preview the same template and plan without
 provider discovery, file writes, or execution; add `--json` for one versioned
 machine-readable object.
 
+For a local pipeline, pass that object to `--from-preview - --yes`. Loki accepts
+at most 1 MiB from non-terminal stdin, revalidates the schema, and recomputes the
+current estimate before the explicitly consented build starts:
+
+```bash
+loki quickstart "an internal reporting workspace" --template dashboard --dry-run --json \
+  | loki quickstart --from-preview - --yes
+```
+
+Omit `--yes`, pipe malformed or oversized JSON, or use `-` from a terminal and
+the continuation exits `2` before provider discovery, PRD writes, or execution.
+
 Drop a spec -- any artifact that describes what you want built -- and Loki
 Mode takes it from spec to deployed app. Specs can be a markdown PRD, a
 GitHub issue URL, or a YAML feature description.