muse-crew 0.7.15 → 0.7.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "muse-crew",
-  "version": "0.7.15",
+  "version": "0.7.16",
   "description": "Opinionated orchestration for Muse — workflows, identities, and tooling for autonomous software development.",
   "license": "UNLICENSED",
   "private": false,

package/workflows/bugfix.js

@@ -1890,6 +1890,10 @@ while (i < STEPS.length) {
           var pollSawOurBuild = false;
           var pollSawStranger = false;
           var lastObservedAgentId = null;
+          // Poll-chunk failure record (2026-09-16, task 1febe8eb): chunk
+          // agent calls that threw instead of returning a verdict —
+          // recorded for the post-poll diagnosis, never terminal alone.
+          var chunkFailures = [];
           for (var chunk = 1; chunk <= 3; chunk++) {
             if (chunk > 1) {
               var refreshPoll = await agent(
@@ -1910,22 +1914,36 @@ while (i < STEPS.length) {
             var pollKey = (chunk === 1)
               ? attemptKey("publish-artifact-poll-" + taskId, totalReworkCount)
               : attemptKey("publish-artifact-poll-" + taskId + "-c" + chunk, totalReworkCount);
-            buildPoll = await agent(
-              "First call tool_search.load_tool_namespace with paths [\"artifact\"]. Then poll artifact_status for slug \"" + PUBLISH_SLUG + "\" \u2014 for OUR build only, the one whose agent_id is \"" + rebuildAgentId + "\" (the receipt captured when the edit was accepted; the agent_id is the artifact system's in-flight build correlation ID, stable across polls while the build runs). Check every 30 seconds, up to 7 checks (3.5 minutes max). On each check, read the raw build object:\n" +
-              "On every check, record whether you have positively OBSERVED our build: a running build whose agent_id equals \"" + rebuildAgentId + "\", or a completed-build record whose agent_id equals \"" + rebuildAgentId + "\" (if the tool surfaces one \u2014 match it mechanically, never assume).\n" +
-              "- If no build is running (build is null) and you have NOT observed our build: our build's completion is UNPROVEN. Absence of a running build is not evidence our build ran. Do NOT report done.\n" +
-              "- If no build is running (build is null) and you previously observed our build running: our build finished. Stop and report done.\n" +
-              "- If the running build's agent_id equals \"" + rebuildAgentId + "\": still ours \u2014 keep waiting.\n" +
-              "- If the running build's agent_id is present but DIFFERENT: that is a stranger's build. Do NOT attribute its completion to our attempt and do NOT wait on it \u2014 keep checking within budget; if the budget expires without observing our build, report done=false. Record it in saw_stranger regardless of what else you observe.\n" +
-              "Return JSON { \"build_done\": <true ONLY when you positively observed our build and it is no longer running, false otherwise>, \"saw_our_build\": <true if you observed our build at any check, false if never>, \"saw_stranger\": true if at ANY check a running build had an agent_id different from ours (\"" + rebuildAgentId + "\"), false otherwise, \"status\": \"<final status or timeout note>\", \"observed_agent_id\": \"<the agent_id seen on the last check, or null when no build was running>\" } and nothing else.",
-              { key: pollKey, label: "Waiting for artifact build to complete (chunk " + chunk + " of 3)",
-                schema: { type: "object", properties: { build_done: { type: "boolean" }, saw_our_build: { type: "boolean" }, saw_stranger: { type: "boolean" }, status: { type: "string" }, observed_agent_id: { type: ["string", "null"] } }, required: ["build_done"] },
-                timeoutMs: 270000 }
-            );
-            pollSawOurBuild = pollSawOurBuild || (buildPoll && buildPoll.saw_our_build === true);
-            pollSawStranger = pollSawStranger || (buildPoll && buildPoll.saw_stranger === true);
-            lastObservedAgentId = (buildPoll && buildPoll.observed_agent_id) || null;
-            if (buildPoll && buildPoll.build_done) { break; }
+            try {
+              buildPoll = await agent(
+                "First call tool_search.load_tool_namespace with paths [\"artifact\"]. Then poll artifact_status for slug \"" + PUBLISH_SLUG + "\" \u2014 for OUR build only, the one whose agent_id is \"" + rebuildAgentId + "\" (the receipt captured when the edit was accepted; the agent_id is the artifact system's in-flight build correlation ID, stable across polls while the build runs). Check every 30 seconds, up to 7 checks (3.5 minutes max). On each check, read the raw build object:\n" +
+                "On every check, record whether you have positively OBSERVED our build: a running build whose agent_id equals \"" + rebuildAgentId + "\", or a completed-build record whose agent_id equals \"" + rebuildAgentId + "\" (if the tool surfaces one \u2014 match it mechanically, never assume).\n" +
+                "- If no build is running (build is null) and you have NOT observed our build: our build's completion is UNPROVEN. Absence of a running build is not evidence our build ran. Do NOT report done.\n" +
+                "- If no build is running (build is null) and you previously observed our build running: our build finished. Stop and report done.\n" +
+                "- If the running build's agent_id equals \"" + rebuildAgentId + "\": still ours \u2014 keep waiting.\n" +
+                "- If the running build's agent_id is present but DIFFERENT: that is a stranger's build. Do NOT attribute its completion to our attempt and do NOT wait on it \u2014 keep checking within budget; if the budget expires without observing our build, report done=false. Record it in saw_stranger regardless of what else you observe.\n" +
+                "Return JSON { \"build_done\": <true ONLY when you positively observed our build and it is no longer running, false otherwise>, \"saw_our_build\": <true if you observed our build at any check, false if never>, \"saw_stranger\": true if at ANY check a running build had an agent_id different from ours (\"" + rebuildAgentId + "\"), false otherwise, \"status\": \"<final status or timeout note>\", \"observed_agent_id\": \"<the agent_id seen on the last check, or null when no build was running>\" } and nothing else.",
+                { key: pollKey, label: "Waiting for artifact build to complete (chunk " + chunk + " of 3)",
+                  schema: { type: "object", properties: { build_done: { type: "boolean" }, saw_our_build: { type: "boolean" }, saw_stranger: { type: "boolean" }, status: { type: "string" }, observed_agent_id: { type: ["string", "null"] } }, required: ["build_done"] },
+                  timeoutMs: 270000 }
+              );
+            } catch (chunkErr) {
+              // A hung or failed chunk is inconclusive, never terminal:
+              // record it and continue to the next chunk. (2026-09-16,
+              // clean-room task 1febe8eb: the platform's 270s agent
+              // timeout killed chunk 2, which threw out of this loop —
+              // skipping chunk 3 AND the STEP 1b audit-dir fallback and
+              // parking on the exception path.) Fail-closed still applies
+              // after chunk 3 and the fallback are exhausted.
+              chunkFailures.push("chunk " + chunk + ": " + (chunkErr && chunkErr.message ? chunkErr.message : chunkErr));
+              log("Artifact build poll chunk " + chunk + " of 3 failed (" + (chunkErr && chunkErr.message ? chunkErr.message : chunkErr) + ") \u2014 continuing to the next chunk; build completion still unproven.");
+            }
+            if (buildPoll) {
+              pollSawOurBuild = pollSawOurBuild || (buildPoll.saw_our_build === true);
+              pollSawStranger = pollSawStranger || (buildPoll.saw_stranger === true);
+              lastObservedAgentId = buildPoll.observed_agent_id || null;
+              if (buildPoll.build_done) { break; }
+            }
           }
           if (!buildPoll || !buildPoll.build_done) {
             buildPoll = { build_done: false, status: (buildPoll && buildPoll.status) || "build still running after the 10.5-minute bounded poll" };
@@ -2048,7 +2066,7 @@ while (i < STEPS.length) {
               var unattributableReason = strangerObserved ? "stranger-build-observed-during-poll"
                 : (pollEndState === "build-still-running-at-poll-end" ? "build-still-running-at-poll-end"
                 : (newAuditDirsAfterPoll.length === 0 ? "no-new-audit-dir-in-window" : "audit-report-unreadable-or-missing"));
-              publishFailure = "Artifact build completion unproven (fail-closed, no provenance stamped): unattributable_reason=" + unattributableReason + "; poll_end_state=" + pollEndState + "; " + "saw_our_build=" + pollSawOurBuild + "; new_audit_dirs=" + newAuditDirsAfterPoll.length + ". Attribution is by window, not by build identity. The publish may or may not have landed. Fail-closed.";
+              publishFailure = "Artifact build completion unproven (fail-closed, no provenance stamped): unattributable_reason=" + unattributableReason + "; poll_end_state=" + pollEndState + "; " + "saw_our_build=" + pollSawOurBuild + "; new_audit_dirs=" + newAuditDirsAfterPoll.length + "; poll_chunks_failed=" + chunkFailures.length + ". Attribution is by window, not by build identity. The publish may or may not have landed. Fail-closed.";
               await recordPublishLedger({
                 commit: mergeCommitForPublish,
                 attempt: rebuildAttemptKey,

package/workflows/chore.js

@@ -1903,6 +1903,10 @@ while (i < STEPS.length) {
           var pollSawOurBuild = false;
           var pollSawStranger = false;
           var lastObservedAgentId = null;
+          // Poll-chunk failure record (2026-09-16, task 1febe8eb): chunk
+          // agent calls that threw instead of returning a verdict —
+          // recorded for the post-poll diagnosis, never terminal alone.
+          var chunkFailures = [];
           for (var chunk = 1; chunk <= 3; chunk++) {
             if (chunk > 1) {
               var refreshPoll = await agent(
@@ -1923,22 +1927,36 @@ while (i < STEPS.length) {
             var pollKey = (chunk === 1)
               ? attemptKey("publish-artifact-poll-" + taskId, reworkCount)
               : attemptKey("publish-artifact-poll-" + taskId + "-c" + chunk, reworkCount);
-            buildPoll = await agent(
-              "First call tool_search.load_tool_namespace with paths [\"artifact\"]. Then poll artifact_status for slug \"" + PUBLISH_SLUG + "\" \u2014 for OUR build only, the one whose agent_id is \"" + rebuildAgentId + "\" (the receipt captured when the edit was accepted; the agent_id is the artifact system's in-flight build correlation ID, stable across polls while the build runs). Check every 30 seconds, up to 7 checks (3.5 minutes max). On each check, read the raw build object:\n" +
-              "On every check, record whether you have positively OBSERVED our build: a running build whose agent_id equals \"" + rebuildAgentId + "\", or a completed-build record whose agent_id equals \"" + rebuildAgentId + "\" (if the tool surfaces one \u2014 match it mechanically, never assume).\n" +
-              "- If no build is running (build is null) and you have NOT observed our build: our build's completion is UNPROVEN. Absence of a running build is not evidence our build ran. Do NOT report done.\n" +
-              "- If no build is running (build is null) and you previously observed our build running: our build finished. Stop and report done.\n" +
-              "- If the running build's agent_id equals \"" + rebuildAgentId + "\": still ours \u2014 keep waiting.\n" +
-              "- If the running build's agent_id is present but DIFFERENT: that is a stranger's build. Do NOT attribute its completion to our attempt and do NOT wait on it \u2014 keep checking within budget; if the budget expires without observing our build, report done=false. Record it in saw_stranger regardless of what else you observe.\n" +
-              "Return JSON { \"build_done\": <true ONLY when you positively observed our build and it is no longer running, false otherwise>, \"saw_our_build\": <true if you observed our build at any check, false if never>, \"saw_stranger\": true if at ANY check a running build had an agent_id different from ours (\"" + rebuildAgentId + "\"), false otherwise, \"status\": \"<final status or timeout note>\", \"observed_agent_id\": \"<the agent_id seen on the last check, or null when no build was running>\" } and nothing else.",
-              { key: pollKey, label: "Waiting for artifact build to complete (chunk " + chunk + " of 3)",
-                schema: { type: "object", properties: { build_done: { type: "boolean" }, saw_our_build: { type: "boolean" }, saw_stranger: { type: "boolean" }, status: { type: "string" }, observed_agent_id: { type: ["string", "null"] } }, required: ["build_done"] },
-                timeoutMs: 270000 }
-            );
-            pollSawOurBuild = pollSawOurBuild || (buildPoll && buildPoll.saw_our_build === true);
-            pollSawStranger = pollSawStranger || (buildPoll && buildPoll.saw_stranger === true);
-            lastObservedAgentId = (buildPoll && buildPoll.observed_agent_id) || null;
-            if (buildPoll && buildPoll.build_done) { break; }
+            try {
+              buildPoll = await agent(
+                "First call tool_search.load_tool_namespace with paths [\"artifact\"]. Then poll artifact_status for slug \"" + PUBLISH_SLUG + "\" \u2014 for OUR build only, the one whose agent_id is \"" + rebuildAgentId + "\" (the receipt captured when the edit was accepted; the agent_id is the artifact system's in-flight build correlation ID, stable across polls while the build runs). Check every 30 seconds, up to 7 checks (3.5 minutes max). On each check, read the raw build object:\n" +
+                "On every check, record whether you have positively OBSERVED our build: a running build whose agent_id equals \"" + rebuildAgentId + "\", or a completed-build record whose agent_id equals \"" + rebuildAgentId + "\" (if the tool surfaces one \u2014 match it mechanically, never assume).\n" +
+                "- If no build is running (build is null) and you have NOT observed our build: our build's completion is UNPROVEN. Absence of a running build is not evidence our build ran. Do NOT report done.\n" +
+                "- If no build is running (build is null) and you previously observed our build running: our build finished. Stop and report done.\n" +
+                "- If the running build's agent_id equals \"" + rebuildAgentId + "\": still ours \u2014 keep waiting.\n" +
+                "- If the running build's agent_id is present but DIFFERENT: that is a stranger's build. Do NOT attribute its completion to our attempt and do NOT wait on it \u2014 keep checking within budget; if the budget expires without observing our build, report done=false. Record it in saw_stranger regardless of what else you observe.\n" +
+                "Return JSON { \"build_done\": <true ONLY when you positively observed our build and it is no longer running, false otherwise>, \"saw_our_build\": <true if you observed our build at any check, false if never>, \"saw_stranger\": true if at ANY check a running build had an agent_id different from ours (\"" + rebuildAgentId + "\"), false otherwise, \"status\": \"<final status or timeout note>\", \"observed_agent_id\": \"<the agent_id seen on the last check, or null when no build was running>\" } and nothing else.",
+                { key: pollKey, label: "Waiting for artifact build to complete (chunk " + chunk + " of 3)",
+                  schema: { type: "object", properties: { build_done: { type: "boolean" }, saw_our_build: { type: "boolean" }, saw_stranger: { type: "boolean" }, status: { type: "string" }, observed_agent_id: { type: ["string", "null"] } }, required: ["build_done"] },
+                  timeoutMs: 270000 }
+              );
+            } catch (chunkErr) {
+              // A hung or failed chunk is inconclusive, never terminal:
+              // record it and continue to the next chunk. (2026-09-16,
+              // clean-room task 1febe8eb: the platform's 270s agent
+              // timeout killed chunk 2, which threw out of this loop —
+              // skipping chunk 3 AND the STEP 1b audit-dir fallback and
+              // parking on the exception path.) Fail-closed still applies
+              // after chunk 3 and the fallback are exhausted.
+              chunkFailures.push("chunk " + chunk + ": " + (chunkErr && chunkErr.message ? chunkErr.message : chunkErr));
+              log("Artifact build poll chunk " + chunk + " of 3 failed (" + (chunkErr && chunkErr.message ? chunkErr.message : chunkErr) + ") \u2014 continuing to the next chunk; build completion still unproven.");
+            }
+            if (buildPoll) {
+              pollSawOurBuild = pollSawOurBuild || (buildPoll.saw_our_build === true);
+              pollSawStranger = pollSawStranger || (buildPoll.saw_stranger === true);
+              lastObservedAgentId = buildPoll.observed_agent_id || null;
+              if (buildPoll.build_done) { break; }
+            }
           }
           if (!buildPoll || !buildPoll.build_done) {
             buildPoll = { build_done: false, status: (buildPoll && buildPoll.status) || "build still running after the 10.5-minute bounded poll" };
@@ -2059,7 +2077,7 @@ while (i < STEPS.length) {
               var unattributableReason = strangerObserved ? "stranger-build-observed-during-poll"
                 : (pollEndState === "build-still-running-at-poll-end" ? "build-still-running-at-poll-end"
                 : (newAuditDirsAfterPoll.length === 0 ? "no-new-audit-dir-in-window" : "audit-report-unreadable-or-missing"));
-              publishFailure = "Artifact build completion unproven (fail-closed, no provenance stamped): unattributable_reason=" + unattributableReason + "; poll_end_state=" + pollEndState + "; " + "saw_our_build=" + pollSawOurBuild + "; new_audit_dirs=" + newAuditDirsAfterPoll.length + ". Attribution is by window, not by build identity. The publish may or may not have landed. Fail-closed.";
+              publishFailure = "Artifact build completion unproven (fail-closed, no provenance stamped): unattributable_reason=" + unattributableReason + "; poll_end_state=" + pollEndState + "; " + "saw_our_build=" + pollSawOurBuild + "; new_audit_dirs=" + newAuditDirsAfterPoll.length + "; poll_chunks_failed=" + chunkFailures.length + ". Attribution is by window, not by build identity. The publish may or may not have landed. Fail-closed.";
               await recordPublishLedger({
                 commit: mergeCommitForPublish,
                 attempt: rebuildAttemptKey,

package/workflows/standard.js

@@ -1855,6 +1855,10 @@ while (i < STEPS.length) {
           var pollSawOurBuild = false;
           var pollSawStranger = false;
           var lastObservedAgentId = null;
+          // Poll-chunk failure record (2026-09-16, task 1febe8eb): chunk
+          // agent calls that threw instead of returning a verdict —
+          // recorded for the post-poll diagnosis, never terminal alone.
+          var chunkFailures = [];
           for (var chunk = 1; chunk <= 3; chunk++) {
             if (chunk > 1) {
               var refreshPoll = await agent(
@@ -1875,22 +1879,36 @@ while (i < STEPS.length) {
             var pollKey = (chunk === 1)
               ? attemptKey("publish-artifact-poll-" + taskId, totalReworkCount)
               : attemptKey("publish-artifact-poll-" + taskId + "-c" + chunk, totalReworkCount);
-            buildPoll = await agent(
-              "First call tool_search.load_tool_namespace with paths [\"artifact\"]. Then poll artifact_status for slug \"" + PUBLISH_SLUG + "\" \u2014 for OUR build only, the one whose agent_id is \"" + rebuildAgentId + "\" (the receipt captured when the edit was accepted; the agent_id is the artifact system's in-flight build correlation ID, stable across polls while the build runs). Check every 30 seconds, up to 7 checks (3.5 minutes max). On each check, read the raw build object:\n" +
-              "On every check, record whether you have positively OBSERVED our build: a running build whose agent_id equals \"" + rebuildAgentId + "\", or a completed-build record whose agent_id equals \"" + rebuildAgentId + "\" (if the tool surfaces one \u2014 match it mechanically, never assume).\n" +
-              "- If no build is running (build is null) and you have NOT observed our build: our build's completion is UNPROVEN. Absence of a running build is not evidence our build ran. Do NOT report done.\n" +
-              "- If no build is running (build is null) and you previously observed our build running: our build finished. Stop and report done.\n" +
-              "- If the running build's agent_id equals \"" + rebuildAgentId + "\": still ours \u2014 keep waiting.\n" +
-              "- If the running build's agent_id is present but DIFFERENT: that is a stranger's build. Do NOT attribute its completion to our attempt and do NOT wait on it \u2014 keep checking within budget; if the budget expires without observing our build, report done=false. Record it in saw_stranger regardless of what else you observe.\n" +
-              "Return JSON { \"build_done\": <true ONLY when you positively observed our build and it is no longer running, false otherwise>, \"saw_our_build\": <true if you observed our build at any check, false if never>, \"saw_stranger\": true if at ANY check a running build had an agent_id different from ours (\"" + rebuildAgentId + "\"), false otherwise, \"status\": \"<final status or timeout note>\", \"observed_agent_id\": \"<the agent_id seen on the last check, or null when no build was running>\" } and nothing else.",
-              { key: pollKey, label: "Waiting for artifact build to complete (chunk " + chunk + " of 3)",
-                schema: { type: "object", properties: { build_done: { type: "boolean" }, saw_our_build: { type: "boolean" }, saw_stranger: { type: "boolean" }, status: { type: "string" }, observed_agent_id: { type: ["string", "null"] } }, required: ["build_done"] },
-                timeoutMs: 270000 }
-            );
-            pollSawOurBuild = pollSawOurBuild || (buildPoll && buildPoll.saw_our_build === true);
-            pollSawStranger = pollSawStranger || (buildPoll && buildPoll.saw_stranger === true);
-            lastObservedAgentId = (buildPoll && buildPoll.observed_agent_id) || null;
-            if (buildPoll && buildPoll.build_done) { break; }
+            try {
+              buildPoll = await agent(
+                "First call tool_search.load_tool_namespace with paths [\"artifact\"]. Then poll artifact_status for slug \"" + PUBLISH_SLUG + "\" \u2014 for OUR build only, the one whose agent_id is \"" + rebuildAgentId + "\" (the receipt captured when the edit was accepted; the agent_id is the artifact system's in-flight build correlation ID, stable across polls while the build runs). Check every 30 seconds, up to 7 checks (3.5 minutes max). On each check, read the raw build object:\n" +
+                "On every check, record whether you have positively OBSERVED our build: a running build whose agent_id equals \"" + rebuildAgentId + "\", or a completed-build record whose agent_id equals \"" + rebuildAgentId + "\" (if the tool surfaces one \u2014 match it mechanically, never assume).\n" +
+                "- If no build is running (build is null) and you have NOT observed our build: our build's completion is UNPROVEN. Absence of a running build is not evidence our build ran. Do NOT report done.\n" +
+                "- If no build is running (build is null) and you previously observed our build running: our build finished. Stop and report done.\n" +
+                "- If the running build's agent_id equals \"" + rebuildAgentId + "\": still ours \u2014 keep waiting.\n" +
+                "- If the running build's agent_id is present but DIFFERENT: that is a stranger's build. Do NOT attribute its completion to our attempt and do NOT wait on it \u2014 keep checking within budget; if the budget expires without observing our build, report done=false. Record it in saw_stranger regardless of what else you observe.\n" +
+                "Return JSON { \"build_done\": <true ONLY when you positively observed our build and it is no longer running, false otherwise>, \"saw_our_build\": <true if you observed our build at any check, false if never>, \"saw_stranger\": true if at ANY check a running build had an agent_id different from ours (\"" + rebuildAgentId + "\"), false otherwise, \"status\": \"<final status or timeout note>\", \"observed_agent_id\": \"<the agent_id seen on the last check, or null when no build was running>\" } and nothing else.",
+                { key: pollKey, label: "Waiting for artifact build to complete (chunk " + chunk + " of 3)",
+                  schema: { type: "object", properties: { build_done: { type: "boolean" }, saw_our_build: { type: "boolean" }, saw_stranger: { type: "boolean" }, status: { type: "string" }, observed_agent_id: { type: ["string", "null"] } }, required: ["build_done"] },
+                  timeoutMs: 270000 }
+              );
+            } catch (chunkErr) {
+              // A hung or failed chunk is inconclusive, never terminal:
+              // record it and continue to the next chunk. (2026-09-16,
+              // clean-room task 1febe8eb: the platform's 270s agent
+              // timeout killed chunk 2, which threw out of this loop —
+              // skipping chunk 3 AND the STEP 1b audit-dir fallback and
+              // parking on the exception path.) Fail-closed still applies
+              // after chunk 3 and the fallback are exhausted.
+              chunkFailures.push("chunk " + chunk + ": " + (chunkErr && chunkErr.message ? chunkErr.message : chunkErr));
+              log("Artifact build poll chunk " + chunk + " of 3 failed (" + (chunkErr && chunkErr.message ? chunkErr.message : chunkErr) + ") \u2014 continuing to the next chunk; build completion still unproven.");
+            }
+            if (buildPoll) {
+              pollSawOurBuild = pollSawOurBuild || (buildPoll.saw_our_build === true);
+              pollSawStranger = pollSawStranger || (buildPoll.saw_stranger === true);
+              lastObservedAgentId = buildPoll.observed_agent_id || null;
+              if (buildPoll.build_done) { break; }
+            }
           }
           if (!buildPoll || !buildPoll.build_done) {
             buildPoll = { build_done: false, status: (buildPoll && buildPoll.status) || "build still running after the 10.5-minute bounded poll" };
@@ -2013,7 +2031,7 @@ while (i < STEPS.length) {
               var unattributableReason = strangerObserved ? "stranger-build-observed-during-poll"
                 : (pollEndState === "build-still-running-at-poll-end" ? "build-still-running-at-poll-end"
                 : (newAuditDirsAfterPoll.length === 0 ? "no-new-audit-dir-in-window" : "audit-report-unreadable-or-missing"));
-              publishFailure = "Artifact build completion unproven (fail-closed, no provenance stamped): unattributable_reason=" + unattributableReason + "; poll_end_state=" + pollEndState + "; " + "saw_our_build=" + pollSawOurBuild + "; new_audit_dirs=" + newAuditDirsAfterPoll.length + ". Attribution is by window, not by build identity. The publish may or may not have landed. Fail-closed.";
+              publishFailure = "Artifact build completion unproven (fail-closed, no provenance stamped): unattributable_reason=" + unattributableReason + "; poll_end_state=" + pollEndState + "; " + "saw_our_build=" + pollSawOurBuild + "; new_audit_dirs=" + newAuditDirsAfterPoll.length + "; poll_chunks_failed=" + chunkFailures.length + ". Attribution is by window, not by build identity. The publish may or may not have landed. Fail-closed.";
               await recordPublishLedger({
                 commit: mergeCommitForPublish,
                 attempt: rebuildAttemptKey,