loki-mode 9.64.0 → 9.66.0

package/SKILL.md

@@ -3,7 +3,7 @@ name: loki-mode
 description: Autonomous spec-driven build system with a built-in trust layer. It does not call work done until it is verified (RARV-C closure loop, 8 quality gates, completion council, verified-completion evidence gate). Triggers on "Loki Mode". Takes a spec (PRD, GitHub issue, OpenAPI doc, etc.) to deployed product with minimal human intervention. Provider-agnostic. Requires --dangerously-skip-permissions flag.
 ---
 
-# Loki Mode v9.64.0
+# Loki Mode v9.66.0
 
 **You are an autonomous agent. You make decisions. You do not ask questions. You do not stop.**
 
@@ -470,4 +470,4 @@ See `CHANGELOG.md` entries [7.5.7], [7.5.8], [7.5.13] for the per-fix list and r
 
 ---
 
-**v9.64.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**
+**v9.66.0 | [Autonomi](https://www.autonomi.dev/) flagship product | ~410 lines core**

package/VERSION

@@ -1 +1 @@
-9.64.0
+9.66.0

package/autonomy/completion-council.sh

@@ -1856,6 +1856,12 @@ _loki_test_provenance() {
 # legitimate completion is never falsely stopped. Default-on; opt out with
 # LOKI_EVIDENCE_GATE=0 (byte-identical to prior behavior, no read/write).
 council_evidence_gate() {
+    # P2 (S-116): when the caller sets _LOKI_EVIDENCE_REQUIRE_TESTS=1, inconclusive
+    # test evidence blocks instead of passing through. council_evaluate sets it as
+    # a function-local (bash dynamic scope, gone on return), so the vote alone can
+    # never approve while every other caller keeps the old pass-through rc.
+    local _require_tests="false"
+    [ "${_LOKI_EVIDENCE_REQUIRE_TESTS:-0}" = "1" ] && _require_tests="true"
     # Knob first: opt-out is exact-as-today, before any file read or write.
     [ "${LOKI_EVIDENCE_GATE:-1}" = "0" ] && return 0
 
@@ -2702,6 +2708,15 @@ PYEOF
         # silently. The durable detail is in evidence-gate-details.json; this is
         # the human-visible honesty at the pass site.
         if [ "$test_inconclusive" = "true" ]; then
+            # Tautological provenance is excluded: tests DID run green (e.g.
+            # characterization tests pass on the base by design), and the
+            # provenance block above promises that downgrade never blocks.
+            if [ "$_require_tests" = "true" ] && [ "$test_inconclusive_reason" != "test_provenance_unconfirmed" ]; then
+                # Council route: a vote over inconclusive tests is the vote alone.
+                log_warn "[Council] Evidence gate: completion not backed by test evidence (${test_inconclusive_reason}); the council vote alone cannot approve. Record a real test run, or set LOKI_EVIDENCE_NO_TESTS_AFFIRMATIVE=1 to treat no-tests as affirmative."
+                _write_evidence_details "block"
+                return 1
+            fi
             log_warn "[Council] Evidence gate: completion not backed by test evidence (${test_inconclusive_reason}). Pass-through; set LOKI_EVIDENCE_NO_TESTS_AFFIRMATIVE=1 to treat no-tests as affirmative."
         fi
         # Same honesty for the runtime-boot axis: a pass that could not confirm the
@@ -4176,7 +4191,9 @@ council_evaluate() {
     fi
 
     # Phase 2.5 (v7.19.1): evidence hard gate - block completion unless there is
-    # real evidence that files changed AND tests are green.
+    # real evidence that files changed AND tests are green. The local below makes
+    # an inconclusive test signal block here, so the vote never approves alone.
+    local _LOKI_EVIDENCE_REQUIRE_TESTS=1
     if ! council_evidence_gate; then
         log_info "[Council] Completion blocked by evidence hard gate"
         return 1  # CONTINUE - cannot complete without real evidence

package/autonomy/lib/proof-generator.py

@@ -855,6 +855,15 @@ def _collect_functional(loki_dir):
     return out
 
 
+def _collect_ablation(loki_dir):
+    """Copy .loki/quality/ablation.json verbatim (S-113). None when absent or
+    unreadable, so the caller attaches no key and an ablation-less receipt stays
+    byte-identical. _compute_headline reads status == not_load_bearing: a change
+    whose deletion leaves the suite green is not proven by that suite.
+    """
+    return _read_json(os.path.join(loki_dir, "quality", "ablation.json"), default=None)
+
+
 def _collect_healthcheck(loki_dir):
     """Read .loki/app-runner/health.json (the app-runner liveness probe).
 
@@ -1460,6 +1469,9 @@ def _build_proof(args, loki_dir, target_dir, repo_root):
     # only, never read by _compute_headline / _compute_degraded.
     if journey:
         facts["journey"] = journey
+    ablation = _collect_ablation(loki_dir)
+    if ablation is not None:
+        facts["ablation"] = ablation
 
     # ASSESSMENTS: LLM opinions. Explicitly labeled as judgment, NOT proof. A
     # green council verdict is an opinion that can be wrong or gamed; it never
@@ -1760,6 +1772,11 @@ def _compute_headline(facts, degraded):
         and tests.get("exit_code") == 0
     )
     if tests_verified and not degraded and diff_nonempty:
+        # S-113: ablation showed deleting the change leaves the suite green, so
+        # the passing tests do not prove the change. Never VERIFIED; amber.
+        ablation = facts.get("ablation")
+        if isinstance(ablation, dict) and ablation.get("status") == "not_load_bearing":
+            return "VERIFIED WITH GAPS"
         return "VERIFIED"
     # Any fact verified at all (tests/build verified, or a passed gate)?
     # A non-empty diff is a PREREQUISITE for VERIFIED (checked above), NOT a

package/autonomy/lib/proof-verify.py

@@ -341,6 +341,10 @@ def _compute_headline(facts, degraded):
         and tests.get("exit_code") == 0
     )
     if tests_verified and not degraded and diff_nonempty:
+        # S-113 mirror: a not_load_bearing ablation never yields VERIFIED.
+        ablation = facts.get("ablation")
+        if isinstance(ablation, dict) and ablation.get("status") == "not_load_bearing":
+            return "VERIFIED WITH GAPS"
         return "VERIFIED"
     any_verified = (
         tests.get("status") == "verified"

package/dashboard/__init__.py

@@ -7,7 +7,7 @@ Modules:
     control: Session control API (start/stop/pause/resume)
 """
 
-__version__ = "9.64.0"
+__version__ = "9.66.0"
 
 # Expose the control app for easy import
 try:

package/docs/INSTALLATION.md

@@ -2,7 +2,7 @@
 
 The flagship product of [Autonomi](https://www.autonomi.dev/). Loki Mode is a spec-driven autonomous builder with a built-in trust layer that takes any spec to a deployed product and verifies completion with evidence (quality gates plus a completion council), not just a "done" claim. Complete installation instructions for all platforms and use cases.
 
-**Version:** v9.64.0
+**Version:** v9.66.0
 
 ---