loki-mode 9.51.1 → 9.53.0

package/README.md

@@ -282,7 +282,8 @@ loki proof show <id>       # the facts, the assessments, and the headline
 loki proof verify <id>     # re-hash the receipt and re-derive the diff
 ```
 
-`loki proof verify` exits 0 clean, 1 on tamper or drift. Receipts are attached
+`loki proof verify` exits 0 clean, 1 on tamper or drift, 2 when it could not check
+(full table: [docs/exit-codes.md](docs/exit-codes.md)). Receipts are attached
 to pull requests automatically (`LOKI_PROVEN_PR=0` to opt out), so a reviewer
 sees the evidence next to the code.
 
@@ -368,7 +369,7 @@ Receipts are written to `.loki/proofs/<run_id>/` automatically at run completion
 ```bash
 loki proof list              # every receipt: run id, time, council verdict, cost, files
 loki proof show <id>         # the full proof.json (facts, assessments, honesty)
-loki proof verify <id>       # re-check the receipt against the repo (exit 0 clean, 1 tamper/drift)
+loki proof verify <id>       # re-check the receipt against the repo (exit 0 clean, 1 tamper/drift, 2 could not check)
 ```
 
 `loki proof verify` does two independent checks and prints the result as JSON:

package/SKILL.md

@@ -3,13 +3,13 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.51.1
+# Loki Mode v9.53.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
 **Spec in, verified product out.** Spec-driven: a "spec" is whatever describes the work -- a Markdown PRD, a GitHub issue, an OpenAPI doc, a Jira ticket (a PRD is one form of spec). The differentiator is the trust layer: Loki does not call work done until it is verified. The RARV-C closure loop, 8 quality gates, the completion council, and the verified-completion evidence gate must all clear before completion is accepted. The evidence gate blocks on empty-diff, red tests, an unhealthy serveable app (runtime-boot axis, `LOKI_EVIDENCE_BOOT_GATE=0` to opt out), and a leaked credential in the changed files (secret-leak axis, `LOKI_EVIDENCE_SECRET_GATE=0` to opt out) -- v8.0.0.
 
-**Evidence Receipt (verify it yourself).** Every run writes a receipt to `.loki/proofs/<run_id>/` (opt out with `LOKI_PROOF=0`) that separates deterministic FACTS (git diff with base/head SHAs and a `diff_sha256`, the test command + exit code, the build command + exit code, each gate verdict) from AI ASSESSMENTS (the council verdict, labeled judgment not proof). The headline is computed only from the facts: VERIFIED (tests ran a real command and exited 0, diff non-empty, nothing skipped), VERIFIED WITH GAPS (each gap listed by name), or NOT VERIFIED (a check ran and failed). Inspect and re-check with `loki proof list|show <id>|verify <id>` (aliased `loki receipt`); `loki proof verify` re-hashes the receipt (tamper) and re-derives the diff from the recorded base SHA against the live repo (drift), exiting 0 clean / 1 tamper-or-drift. This is honesty-of-done, not a claim that the code is bug-free.
+**Evidence Receipt (verify it yourself).** Every run writes a receipt to `.loki/proofs/<run_id>/` (opt out with `LOKI_PROOF=0`) that separates deterministic FACTS (git diff with base/head SHAs and a `diff_sha256`, the test command + exit code, the build command + exit code, each gate verdict) from AI ASSESSMENTS (the council verdict, labeled judgment not proof). The headline is computed only from the facts: VERIFIED (tests ran a real command and exited 0, diff non-empty, nothing skipped), VERIFIED WITH GAPS (each gap listed by name), or NOT VERIFIED (a check ran and failed). Inspect and re-check with `loki proof list|show <id>|verify <id>` (aliased `loki receipt`); `loki proof verify` re-hashes the receipt (tamper) and re-derives the diff from the recorded base SHA against the live repo (drift), exiting 0 clean / 1 tamper-or-drift / 2 could not check (64 usage, 66 unknown id; see `docs/exit-codes.md`). This is honesty-of-done, not a claim that the code is bug-free.
 
 **Provider-agnostic (stable since v5.0.0):** runs on Claude/Codex/Cline/Aider with abstract model tiers and degraded mode for non-Claude providers; no vendor lock-in. Gemini deprecated v7.5.18. See `skills/providers.md`. **Current track (v8.0.0):** the Anthropic Agent SDK route (see below), spec-mode expansion for OpenAPI/GraphQL/Postman contracts, the runtime-boot and secret-leak evidence axes, and `loki steer` / `loki why` for mid-run control. Earlier tracks: LSP grounding as a first-class agent tool (v7.7.x) and Phase 1 RARV-C closure (real provider judges, gate-failure flock, synthetic PRD e2e, status `--json`).
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.51.1 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.53.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.51.1
+9.53.0

package/autonomy/completion-council.sh

@@ -19,6 +19,12 @@
 #   - Multi-agent debate: Voting beats unanimous (+13.2%), KS adaptive stopping
 #   - NVIDIA ToolOrchestra: Efficiency metrics for agent tool use
 #
+# Inline Python (D7): the council runs with the cwd inside the agent's repo, so
+# every "python3 -c" / "python3 -" here runs -E (a PYTHONPATH empty component
+# would load a committed sitecustomize.py) and drops '' and '.' from sys.path
+# before any other import (a committed json.py would print the verdict).
+# Pinned by tests/moat/p2-honest-verdict.sh P2.council-readers-not-shadowed.
+#
 # Environment Variables:
 #   LOKI_COUNCIL_ENABLED          - Enable completion council (default: true)
 #   LOKI_COUNCIL_SIZE             - Number of council members (default: 3)
@@ -371,7 +377,7 @@ council_track_iteration() {
     _COUNCIL_ITERATION="${ITERATION_COUNT:-0}" \
     _COUNCIL_FILES_CHANGED="$files_changed" \
     _COUNCIL_DIFF_HASH="$combined_hash" \
-    python3 -c "
+    python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 state_file = os.environ['_COUNCIL_STATE_FILE']
 try:
@@ -453,7 +459,7 @@ _uncertainty_state_path() {
 # Read uncertainty.json (or emit a default object if missing/corrupt) to stdout.
 _uncertainty_read_state() {
     local file="$1"
-    _UNC_FILE="$file" python3 -c "
+    _UNC_FILE="$file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 f = os.environ['_UNC_FILE']
 default = {
@@ -487,7 +493,7 @@ _uncertainty_write_state() {
     dir="$(dirname "$file")"
     mkdir -p "$dir" 2>/dev/null || true
     tmp="${file}.tmp.$$"
-    if _UNC_PAYLOAD="$payload" _UNC_TMP="$tmp" python3 -c "
+    if _UNC_PAYLOAD="$payload" _UNC_TMP="$tmp" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 payload = os.environ['_UNC_PAYLOAD']
 tmp = os.environ['_UNC_TMP']
@@ -539,7 +545,7 @@ uncertainty_should_escalate() {
              _UNC_SPLIT_ROUNDS="$split_rounds" \
              _UNC_NOCHANGE_MIN="$nochange_min" \
              _UNC_RING_SIZE="$ring_size" \
-             python3 -c "
+             python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 
 prior = json.loads(os.environ['_UNC_PRIOR'])
@@ -826,7 +832,7 @@ council_vote() {
                 local budget_exceeded=false
                 if [ "$total_issue_count" -gt 0 ] && [ "$COUNCIL_ERROR_BUDGET" != "0.0" ] && [ "$COUNCIL_ERROR_BUDGET" != "0" ]; then
                     # Check if non-blocking issue ratio exceeds the error budget
-                    budget_exceeded=$(_NB="$non_blocking_count" _TOTAL="$total_issue_count" _BUDGET="$COUNCIL_ERROR_BUDGET" python3 -c "
+                    budget_exceeded=$(_NB="$non_blocking_count" _TOTAL="$total_issue_count" _BUDGET="$COUNCIL_ERROR_BUDGET" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import os
 nb = int(os.environ['_NB'])
 total = int(os.environ['_TOTAL'])
@@ -918,7 +924,7 @@ print('true' if ratio > budget else 'false')
     _COUNCIL_REJECT="$reject_count" \
     _COUNCIL_ITERATION="${ITERATION_COUNT:-0}" \
     _COUNCIL_THRESHOLD="$effective_threshold" \
-    python3 -c "
+    python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 from datetime import datetime, timezone
 state_file = os.environ['_COUNCIL_STATE_FILE']
@@ -1036,7 +1042,7 @@ council_write_transcript() {
     _MEMBERS_DIR="$COUNCIL_STATE_DIR/votes/iteration-${iteration}" \
     _THRESHOLD="$effective_threshold" \
     _OUT="$transcript_file" \
-    python3 -c "
+    python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, pathlib, re
 
 iteration_id = os.environ['_IID']
@@ -1214,7 +1220,7 @@ EVIDENCE_SECTION
         local queue_file=".loki/queue/${queue}.json"
         if [ -f "$queue_file" ]; then
             local count
-            count=$(_QUEUE_FILE="$queue_file" python3 -c "import json, os; print(len(json.load(open(os.environ['_QUEUE_FILE']))))" 2>/dev/null || echo "?")
+            count=$(_QUEUE_FILE="$queue_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os; print(len(json.load(open(os.environ['_QUEUE_FILE']))))" 2>/dev/null || echo "?")
             echo "- ${queue}: $count tasks" >> "$evidence_file"
         fi
     done
@@ -1287,7 +1293,7 @@ EVIDENCE_SECTION
     elif [ -f ".loki/verification/playwright-results.json" ]; then
         echo "" >> "$evidence_file"
         echo "## Playwright Smoke Test Results" >> "$evidence_file"
-        _PW_RESULTS=".loki/verification/playwright-results.json" python3 -c "
+        _PW_RESULTS=".loki/verification/playwright-results.json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 try:
     d = json.load(open(os.environ['_PW_RESULTS']))
@@ -1375,7 +1381,7 @@ council_checklist_gate() {
     # council_heldout_gate at the ship gate, and surfacing them in this gate's
     # block report would leak their identity back into the build loop.
     local gate_result
-    gate_result=$(_RESULTS_FILE="$results_file" _WAIVERS_FILE="$waivers_file" _HELDOUT_FILE="$heldout_file" python3 -c "
+    gate_result=$(_RESULTS_FILE="$results_file" _WAIVERS_FILE="$waivers_file" _HELDOUT_FILE="$heldout_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, sys, os
 
 results_file = os.environ['_RESULTS_FILE']
@@ -1438,13 +1444,13 @@ else:
         local timestamp
         timestamp=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
         local failures_json
-        failures_json=$(_FAILURES="$failures" python3 -c "
+        failures_json=$(_FAILURES="$failures" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 items = os.environ['_FAILURES'].split('|')
 print(json.dumps(items))
 " 2>/dev/null || echo '[]')
         local critical_count
-        critical_count=$(_FAILURES="$failures" python3 -c "
+        critical_count=$(_FAILURES="$failures" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import os
 print(len(os.environ['_FAILURES'].split('|')))
 " 2>/dev/null || echo '0')
@@ -1514,7 +1520,7 @@ council_heldout_gate() {
     # contain ':' or '|'); they are read separately from the held-out JSON block
     # below in the BLOCK branch.
     local gate_result
-    gate_result=$(_RESULTS_FILE="$results_file" _HELDOUT_FILE="$heldout_file" _WAIVERS_FILE="$waivers_file" python3 -c "
+    gate_result=$(_RESULTS_FILE="$results_file" _HELDOUT_FILE="$heldout_file" _WAIVERS_FILE="$waivers_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, sys, os
 
 results_file = os.environ['_RESULTS_FILE']
@@ -1634,7 +1640,7 @@ print('%s %d %d' % (verdict, passed, failed))
     if [ "$verdict" = "BLOCK" ]; then
         # Read failing held-out titles directly from the data (colon/pipe-safe).
         local titles_json titles_display
-        titles_json=$(_RESULTS_FILE="$results_file" _HELDOUT_FILE="$heldout_file" _WAIVERS_FILE="$waivers_file" python3 -c "
+        titles_json=$(_RESULTS_FILE="$results_file" _HELDOUT_FILE="$heldout_file" _WAIVERS_FILE="$waivers_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 results = json.load(open(os.environ['_RESULTS_FILE']))
 heldout_ids = set(json.load(open(os.environ['_HELDOUT_FILE'])).get('held_out', []))
@@ -1653,7 +1659,7 @@ for cat in results.get('categories', []):
             titles.append(item.get('title', iid))
 print(json.dumps(titles[:5]))
 " 2>/dev/null || echo '[]')
-        titles_display=$(_T="$titles_json" python3 -c "
+        titles_display=$(_T="$titles_json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 try:
     print(', '.join(json.loads(os.environ['_T'])))
@@ -1927,7 +1933,8 @@ council_evidence_gate() {
     local test_inconclusive_reason=""
     if [ -f "$tr_file" ]; then
         local test_status
-        test_status=$(_TR_FILE="$tr_file" python3 <<'PYEOF' 2>/dev/null || echo "INCONCLUSIVE:none:true"
+        test_status=$(_TR_FILE="$tr_file" python3 -E -s - <<'PYEOF' 2>/dev/null || echo "INCONCLUSIVE:none:true"
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os, sys
 tr_file = os.environ['_TR_FILE']
 try:
@@ -1937,7 +1944,9 @@ except (json.JSONDecodeError, IOError, KeyError, ValueError):
     print('INCONCLUSIVE:none:true')
     sys.exit(0)
 runner = d.get('runner', 'none')
-passed = d.get('pass', True)
+# No default of True: a results file with no "pass" key recorded no outcome, and
+# an unrecorded outcome is not a pass. None falls to INCONCLUSIVE below.
+passed = d.get('pass')
 status = d.get('status', '')
 #82 (zero-test-file hardening): a runner that ran but executed ZERO real tests
 # (node --test on a *.test.js with no test() calls; jest --passWithNoTests with
@@ -1952,7 +1961,10 @@ if runner == 'none':
 elif passed is False:
     print('FAIL:%s:false' % runner)
 elif status == 'no_tests_run' or passed is not True:
-    print('INCONCLUSIVE:%s:true' % runner)
+    # Both are INCONCLUSIVE; NO_PASS names the second: no boolean pass was
+    # recorded at all (missing, null, or a non-boolean value), which is not a
+    # zero-test run.
+    print('%s:%s:true' % ('INCONCLUSIVE' if status == 'no_tests_run' else 'NO_PASS', runner))
 else:
     print('PASS:%s:true' % runner)
 PYEOF
@@ -1983,6 +1995,13 @@ PYEOF
             test_inconclusive="true"
             test_inconclusive_reason="no_tests_executed"
         fi
+        # A real runner label but no boolean pass recorded: the same
+        # pass-through INCONCLUSIVE, named for what it is. Not gated by the
+        # opt-out either: an unrecorded outcome is never affirmative.
+        if [ "$_verdict" = "NO_PASS" ]; then
+            test_inconclusive="true"
+            test_inconclusive_reason="no_pass_recorded"
+        fi
     else
         # Missing test-results.json: no suite was recorded at all. Like the
         # runner=="none" case this is not affirmative evidence, so classify it
@@ -2173,7 +2192,8 @@ DETAILS_EOF
         boot_inconclusive_reason="no_app_runner"
     elif command -v python3 >/dev/null 2>&1; then
         local _boot_status
-        _boot_status=$(_HEALTH="$_health_file" _STATE="$_state_file" python3 <<'PYEOF' 2>/dev/null || echo "INCONCLUSIVE:parse_error"
+        _boot_status=$(_HEALTH="$_health_file" _STATE="$_state_file" python3 -E -s - <<'PYEOF' 2>/dev/null || echo "INCONCLUSIVE:parse_error"
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os
 health_file = os.environ.get('_HEALTH', '')
 state_file = os.environ.get('_STATE', '')
@@ -2336,7 +2356,8 @@ PYEOF
         persist_inconclusive="true"; persist_inconclusive_reason="not_serveable"
     elif command -v python3 >/dev/null 2>&1; then
         local _p_status
-        _p_status=$(_PF="$_proof_file" _ITER="${ITERATION_COUNT:-0}" python3 <<'PYEOF' 2>/dev/null || echo "MISSING"
+        _p_status=$(_PF="$_proof_file" _ITER="${ITERATION_COUNT:-0}" python3 -E -s - <<'PYEOF' 2>/dev/null || echo "MISSING"
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os
 p = os.environ['_PF']
 if not os.path.isfile(p):
@@ -2399,7 +2420,8 @@ PYEOF
         auth_inconclusive="true"; auth_inconclusive_reason="not_serveable"
     elif command -v python3 >/dev/null 2>&1; then
         local _a_status
-        _a_status=$(_PF="$_proof_file" _STRICT="${LOKI_PROOF_AUTH_STRICT:-1}" _ITER="${ITERATION_COUNT:-0}" python3 <<'PYEOF' 2>/dev/null || echo "MISSING"
+        _a_status=$(_PF="$_proof_file" _STRICT="${LOKI_PROOF_AUTH_STRICT:-1}" _ITER="${ITERATION_COUNT:-0}" python3 -E -s - <<'PYEOF' 2>/dev/null || echo "MISSING"
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os
 p = os.environ['_PF']
 strict = os.environ.get('_STRICT', '1') != '0'
@@ -2477,7 +2499,8 @@ PYEOF
         authz_inconclusive="true"; authz_inconclusive_reason="not_serveable"
     elif command -v python3 >/dev/null 2>&1; then
         local _authz_status
-        _authz_status=$(_PF="$_proof_file" _ITER="${ITERATION_COUNT:-0}" python3 <<'PYEOF' 2>/dev/null || echo "MISSING"
+        _authz_status=$(_PF="$_proof_file" _ITER="${ITERATION_COUNT:-0}" python3 -E -s - <<'PYEOF' 2>/dev/null || echo "MISSING"
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os
 p = os.environ['_PF']
 if not os.path.isfile(p):
@@ -2734,7 +2757,7 @@ PYEOF
     local timestamp
     timestamp=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
     local failures_json diff_ok tests_ok base_for_json
-    failures_json=$(_FAILURES="$failures" python3 -c "
+    failures_json=$(_FAILURES="$failures" python3 -E -s -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 items = [s for s in os.environ['_FAILURES'].split('|') if s]
 print(json.dumps(items[:5]))
@@ -2751,11 +2774,11 @@ print(json.dumps(items[:5]))
     if [ "$authz_fails" = "true" ]; then authz_ok="false"; else authz_ok="true"; fi
     # Record WHY boot was inconclusive (no_app_runner / not_serveable / etc.) so a
     # consumer of the block report can tell a genuine boot pass from a pass-through.
-    boot_reason_json=$(_R="${boot_inconclusive_reason:-}" python3 -c "import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
-    nomock_reason_json=$(_R="${nomock_inconclusive_reason:-}" python3 -c "import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
-    persist_reason_json=$(_R="${persist_inconclusive_reason:-}" python3 -c "import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
-    auth_reason_json=$(_R="${auth_inconclusive_reason:-}" python3 -c "import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
-    authz_reason_json=$(_R="${authz_inconclusive_reason:-}" python3 -c "import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
+    boot_reason_json=$(_R="${boot_inconclusive_reason:-}" python3 -E -s -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
+    nomock_reason_json=$(_R="${nomock_inconclusive_reason:-}" python3 -E -s -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
+    persist_reason_json=$(_R="${persist_inconclusive_reason:-}" python3 -E -s -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
+    auth_reason_json=$(_R="${auth_inconclusive_reason:-}" python3 -E -s -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
+    authz_reason_json=$(_R="${authz_inconclusive_reason:-}" python3 -E -s -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json,os; print(json.dumps(os.environ['_R']))" 2>/dev/null || echo '""')
     base_for_json="${base_sha:-}"
     cat > "$ev_tmp" << EVIDENCE_EOF
 {
@@ -3393,7 +3416,7 @@ council_heuristic_review() {
             local _tr_file=".loki/quality/test-results.json"
             local _tests_ok=0
             if [ -f "$_tr_file" ] && command -v python3 >/dev/null 2>&1; then
-                _tests_ok=$(_TR="$_tr_file" python3 -c "
+                _tests_ok=$(_TR="$_tr_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 try:
     with open(os.environ['_TR']) as f:
@@ -3558,13 +3581,15 @@ council_evaluate_member() {
     # the member stays CONTINUE.
     #
     # Parse verdict mirrors council_evidence_gate: runner=="none" => PASS,
-    # pass is False => FAIL, else PASS. Unparseable/missing => not present.
+    # pass is False => FAIL, only a boolean True (and not status no_tests_run)
+    # => PASS; a missing, null or non-boolean pass key recorded no outcome =>
+    # INCONCLUSIVE (not red, not positive). Unparseable/missing file => absent.
     local tr_file="$loki_dir/quality/test-results.json"
-    local test_evidence="absent"   # absent | pass | fail
+    local test_evidence="absent"   # absent | pass | fail | inconclusive
     local test_runner_seen="none"
     if [ -f "$tr_file" ]; then
         local _tr_status
-        _tr_status=$(_TR_FILE="$tr_file" python3 -c "
+        _tr_status=$(_TR_FILE="$tr_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     with open(os.environ['_TR_FILE']) as f:
@@ -3573,11 +3598,13 @@ except (json.JSONDecodeError, IOError, KeyError, ValueError):
     print('absent:none')
     sys.exit(0)
 runner = d.get('runner', 'none')
-passed = d.get('pass', True)
+passed = d.get('pass')
 if runner == 'none':
     print('pass:none')
 elif passed is False:
     print('fail:%s' % runner)
+elif passed is not True or d.get('status') == 'no_tests_run':
+    print('inconclusive:%s' % runner)
 else:
     print('pass:%s' % runner)
 " 2>/dev/null || echo "absent:none")
@@ -3619,7 +3646,7 @@ else:
             local _q _qcount
             for _q in pending in-progress blocked; do
                 [ -f "$loki_dir/queue/${_q}.json" ] || continue
-                _qcount=$(_QUEUE_FILE="$loki_dir/queue/${_q}.json" python3 -c "import json, os
+                _qcount=$(_QUEUE_FILE="$loki_dir/queue/${_q}.json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os
 d = json.load(open(os.environ['_QUEUE_FILE']))
 print(len(d.get('tasks', d) if isinstance(d, dict) else d))" 2>/dev/null || echo "0")
                 # Guard against a non-numeric read (malformed file, python absent).
@@ -3642,6 +3669,8 @@ print(len(d.get('tasks', d) if isinstance(d, dict) else d))" 2>/dev/null || echo
             # a no-tests / greenfield project leaves test_auditor at CONTINUE.
             if [ "$test_evidence" = "absent" ]; then
                 reasons="${reasons}no structured test results found; "
+            elif [ "$test_evidence" = "inconclusive" ]; then
+                reasons="${reasons}structured test results inconclusive (runner '$test_runner_seen' recorded no boolean pass); "
             elif [ "$test_runner_seen" = "none" ]; then
                 reasons="${reasons}no real test suite ran (runner none); "
             elif [ "$test_evidence" = "pass" ]; then
@@ -3754,7 +3783,7 @@ council_aggregate_votes() {
     # Serialize the votes array with json.dumps so backslashes/control chars are
     # escaped correctly (BUG fix: sed-only escaping produced invalid JSON).
     local votes_json
-    votes_json=$(_MEMBERS="$_members" _ROLES="$_roles" _VOTEVALS="$_vote_values" _REASONS="$_reasons" python3 -c "
+    votes_json=$(_MEMBERS="$_members" _ROLES="$_roles" _VOTEVALS="$_vote_values" _REASONS="$_reasons" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 def lines(name):
     v = os.environ.get(name, '')
@@ -3797,7 +3826,7 @@ print(json.dumps(out))
     _VERDICT="$verdict" \
     _VOTES="$votes_json" \
     _ROUND_FILE="$round_file" \
-    python3 -c "
+    python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 from datetime import datetime, timezone
 round_data = {
@@ -3846,14 +3875,19 @@ council_devils_advocate_review() {
     # (.loki/quality/test-results.json, written by run.sh:ensure_completion_test
     # _evidence; parsed the same way as council_evaluate_member ~2414-2438 and the
     # evidence gate). Parse verdict: runner=="none" => PASS (no real suite to
-    # contradict completion), pass is False => FAIL, else PASS. The legacy log
+    # contradict completion), pass is False => FAIL, a boolean True => PASS,
+    # anything else (missing/null/non-boolean pass, status no_tests_run) =>
+    # INCONCLUSIVE. Only FAIL is an issue here: inconclusive does not contradict
+    # completion, exactly as council_evidence_gate lets it through, and vetoing
+    # it would stall a zero-test run (#82) that is meant to reach this vote.
+    # The legacy log
     # glob is kept ONLY as an ADDITIONAL red signal -- its absence is NOT an issue
     # (nothing writes .loki/logs/test-*.log, so an empty glob is the normal case
     # and must never veto a unanimous COMPLETE on its own).
     local tr_file="$loki_dir/quality/test-results.json"
     if [ -f "$tr_file" ]; then
         local _tr_status
-        _tr_status=$(_TR_FILE="$tr_file" python3 -c "
+        _tr_status=$(_TR_FILE="$tr_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     with open(os.environ['_TR_FILE']) as f:
@@ -3862,11 +3896,13 @@ except (json.JSONDecodeError, IOError, KeyError, ValueError):
     print('absent')
     sys.exit(0)
 runner = d.get('runner', 'none')
-passed = d.get('pass', True)
+passed = d.get('pass')
 if runner == 'none':
     print('pass')
 elif passed is False:
     print('fail')
+elif passed is not True or d.get('status') == 'no_tests_run':
+    print('inconclusive')
 else:
     print('pass')
 " 2>/dev/null || echo "absent")
@@ -3889,7 +3925,7 @@ else:
     # Skeptical check 2: Are there still failing tasks in the queue?
     if [ -f "$loki_dir/queue/failed.json" ]; then
         local failed_count
-        failed_count=$(_QUEUE_FILE="$loki_dir/queue/failed.json" python3 -c "import json, os; print(len(json.load(open(os.environ['_QUEUE_FILE']))))" 2>/dev/null || echo "0")
+        failed_count=$(_QUEUE_FILE="$loki_dir/queue/failed.json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os; print(len(json.load(open(os.environ['_QUEUE_FILE']))))" 2>/dev/null || echo "0")
         if [ "$failed_count" -gt 0 ]; then
             ((issues_found++))
             issue_details="${issue_details}$failed_count tasks in failed queue; "
@@ -3935,7 +3971,7 @@ else:
     _ISSUES="$issues_found" \
     _DETAILS="${issue_details:-none}" \
     _DA_FILE="$da_file" \
-    python3 -c "
+    python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 from datetime import datetime, timezone
 da_result = {
@@ -4031,7 +4067,7 @@ council_evaluate() {
             if loki_council_dispatch_agents "$ITERATION_COUNT" "${COUNCIL_PRD_PATH:-}"; then
                 local _va_round_file="$COUNCIL_STATE_DIR/votes/round-${ITERATION_COUNT}.json"
                 if [ -f "$_va_round_file" ]; then
-                    aggregate_result=$(_RF="$_va_round_file" python3 -c "import json, os; print(json.load(open(os.environ['_RF'])).get('verdict', 'CONTINUE'))" 2>/dev/null || echo "")
+                    aggregate_result=$(_RF="$_va_round_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os; print(json.load(open(os.environ['_RF'])).get('verdict', 'CONTINUE'))" 2>/dev/null || echo "")
                 fi
             fi
         fi
@@ -4053,7 +4089,7 @@ council_evaluate() {
         local complete_count=0
         local members_present=0
         if [ -f "$round_file" ]; then
-            complete_count=$(_RF="$round_file" python3 -c "import json, os; print(json.load(open(os.environ['_RF'])).get('complete_votes', 0))" 2>/dev/null || echo "0")
+            complete_count=$(_RF="$round_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os; print(json.load(open(os.environ['_RF'])).get('complete_votes', 0))" 2>/dev/null || echo "0")
             # WAVE13 CRITICAL quorum gate: how many voters actually responded
             # (total_members records the ACTUAL returned count -- see
             # voter-agents.sh). A degraded/partial dispatch response must never
@@ -4061,7 +4097,7 @@ council_evaluate() {
             # somehow read COMPLETE. This is defense-in-depth: the parser
             # already forces CONTINUE on undercount, but the completion-detection
             # trust core must independently assert full quorum before stopping.
-            members_present=$(_RF="$round_file" python3 -c "import json, os; print(json.load(open(os.environ['_RF'])).get('total_members', 0))" 2>/dev/null || echo "0")
+            members_present=$(_RF="$round_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]; import json, os; print(json.load(open(os.environ['_RF'])).get('total_members', 0))" 2>/dev/null || echo "0")
         fi
         # Normalize to integers (guard against empty/non-numeric on read failure)
         case "$complete_count" in (''|*[!0-9]*) complete_count=0 ;; esac
@@ -4157,7 +4193,7 @@ council_managed_should_stop() {
     diff_summary=$(cd "$project_dir" 2>/dev/null && git diff --stat 2>/dev/null | tail -20 | tr '\n' ' ' || echo "")
     local test_summary=""
     if [ -f "$loki_dir/quality/test-results.json" ]; then
-        test_summary=$(_TRF="$loki_dir/quality/test-results.json" python3 -c "
+        test_summary=$(_TRF="$loki_dir/quality/test-results.json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 try:
     d = json.load(open(os.environ['_TRF']))
@@ -4168,7 +4204,7 @@ except Exception:
     fi
     local pending_tasks="[]"
     if [ -f "$loki_dir/queue/pending.json" ]; then
-        pending_tasks=$(_QF="$loki_dir/queue/pending.json" python3 -c "
+        pending_tasks=$(_QF="$loki_dir/queue/pending.json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 try:
     d = json.load(open(os.environ['_QF']))
@@ -4191,7 +4227,8 @@ except Exception:
     _CC_VERDICTS_DIR="$verdicts_dir" \
     _CC_LOKI_DIR="$loki_dir" \
     LOKI_TARGET_DIR="${TARGET_DIR:-$(pwd)}" \
-    python3 - <<'PYEOF' 2>/dev/null || exit_code=$?
+    python3 -E - <<'PYEOF' 2>/dev/null || exit_code=$?
+import sys; sys.path[:] = [p for p in sys.path if p not in ("", ".")]
 import json, os, sys, pathlib
 
 # Path setup: prefer project_dir so providers.managed resolves from main tree.
@@ -4368,7 +4405,7 @@ _council_convergence_evidence_green() {
     # file or runner=="none" (no suite) is NOT affirmative evidence -> not green.
     [ -f "$tr_file" ] || return 1
     local tr_state
-    tr_state=$(_TR_FILE="$tr_file" python3 -c "
+    tr_state=$(_TR_FILE="$tr_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     with open(os.environ['_TR_FILE']) as f:
@@ -4376,9 +4413,12 @@ try:
 except (json.JSONDecodeError, IOError, KeyError, ValueError):
     print('no'); sys.exit(0)
 runner = d.get('runner', 'none')
-passed = d.get('pass', True)
-# Affirmative green requires a REAL suite (runner != none) that did not fail.
-print('yes' if (runner != 'none' and passed is not False) else 'no')
+passed = d.get('pass')
+# Affirmative green requires a REAL suite (runner != none) that recorded a
+# boolean True pass. A missing/null/non-boolean pass key or a zero-test run
+# (status no_tests_run) is inconclusive, which is not green.
+print('yes' if (runner != 'none' and passed is True
+                and d.get('status') != 'no_tests_run') else 'no')
 " 2>/dev/null || echo "no")
     [ "$tr_state" = "yes" ] || return 1
 
@@ -4388,7 +4428,7 @@ print('yes' if (runner != 'none' and passed is not False) else 'no')
     local results_file="${TARGET_DIR:-.}/.loki/checklist/verification-results.json"
     if [ -f "$results_file" ]; then
         local cl_state
-        cl_state=$(_RESULTS_FILE="$results_file" python3 -c "
+        cl_state=$(_RESULTS_FILE="$results_file" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os, sys
 try:
     with open(os.environ['_RESULTS_FILE']) as f:
@@ -4637,7 +4677,7 @@ council_write_report() {
 REPORT_HEADER
 
     # Append vote history from state
-    _COUNCIL_STATE_FILE="$COUNCIL_STATE_DIR/state.json" python3 -c "
+    _COUNCIL_STATE_FILE="$COUNCIL_STATE_DIR/state.json" python3 -E -c "import sys; sys.path[:] = [p for p in sys.path if p not in ('', '.')]
 import json, os
 try:
     with open(os.environ['_COUNCIL_STATE_FILE']) as f:

package/autonomy/lib/workspace_diff.py

@@ -29,6 +29,21 @@ def _excluded(path):
     return path == ".loki" or path.startswith(".loki/")
 
 
+def _preexisting_untracked(repo_dir):
+    """Paths the user already had untracked when the Loki session branch was
+    minted (run.sh setup_agent_branch writes .loki/state/preexisting-untracked.z,
+    NUL-delimited, relative to the repo top). They are not this run's work, so
+    the receipt does not list them; tree_sha256 still binds their bytes. Returns
+    (prefix of repo_dir inside the repo, set of paths); empty when absent."""
+    try:
+        with open(os.path.join(repo_dir, ".loki", "state", "preexisting-untracked.z"), "rb") as fh:
+            raw = fh.read()
+    except OSError:
+        return "", frozenset()
+    paths = frozenset(p.decode("utf-8", "surrogateescape") for p in raw.split(b"\0") if p)
+    return (_git(repo_dir, ["rev-parse", "--show-prefix"]) or "").strip(), paths
+
+
 def _parse_numstat(raw):
     files = []
     for record in (raw or "").split("\0"):
@@ -107,7 +122,9 @@ def collect_workspace_diff(repo_dir, base, include_diffs=False):
                 diffs.append({"path": path, "patch": chunk})
 
     untracked = _git(repo_dir, ["ls-files", "--others", "--exclude-standard", "-z"])
-    for path in sorted(p for p in (untracked or "").split("\0") if p and not _excluded(p)):
+    prefix, preexisting = _preexisting_untracked(repo_dir)
+    for path in sorted(p for p in (untracked or "").split("\0")
+                       if p and not _excluded(p) and prefix + p not in preexisting):
         stat = _git(
             repo_dir,
             ["diff", "--no-index", "--no-renames", "--numstat", "-z", "--", "/dev/null", path],