okstra 0.130.3 → 0.131.0

package/runtime/python/okstra_ctl/run.py

@@ -1788,6 +1788,11 @@ def _persist_run_inputs(
     brief_relative: str,
 ) -> None:
     """이 run 의 입력 스냅샷(run-inputs-*.json)을 run-manifests 디렉터리에 기록."""
+    approved_plan_path = (
+        str(Path(inp.approved_plan_path).resolve())
+        if inp.approved_plan_path
+        else ""
+    )
     run_inputs_path = write_run_inputs(
         project_root=Path(inp.project_root),
         run_manifests_dir=Path(ctx["RUN_MANIFESTS_DIR"]),
@@ -1805,7 +1810,7 @@ def _persist_run_inputs(
             "reportWriterModel": models.rw.display,
             "executor": models.executor_provider,
             "relatedTasks": inp.related_tasks_raw,
-            "approvedPlanPath": inp.approved_plan_path,
+            "approvedPlanPath": approved_plan_path,
             "clarificationResponsePath": inp.clarification_response_path,
             "renderOnly": inp.render_only,
         },
@@ -2363,8 +2368,15 @@ def main(argv: list[str]) -> int:
     p.add_argument("--critic", default="")
     p.add_argument("--related-tasks", default="", dest="related_tasks_raw")
     p.add_argument("--approved-plan", default="", dest="approved_plan_path")
-    p.add_argument("--qa-waiver", default="", dest="qa_waiver",
-                   help='Stage conformance 우회: "<stageKey>:<reason>" (사용자 확인형, 매니페스트 entry.waiver 기록)')
+    p.add_argument(
+        "--qa-waiver",
+        default="",
+        dest="qa_waiver",
+        help=(
+            'User-recorded stage conformance waiver: "<stageKey>:<reason>". '
+            "Normally used only for blocking local io entries; external QA is advisory."
+        ),
+    )
     p.add_argument(
         "--stage", default="auto", dest="stage",
         help=(

package/runtime/python/okstra_ctl/worker_prompt_contract.py

@@ -6,7 +6,11 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Mapping, Sequence
 
-from .worker_prompt_policy import PromptPlan, resolve_prompt_plan_for_manifest
+from .worker_prompt_policy import (
+    ERRORS_PATH_HEADERS,
+    PromptPlan,
+    resolve_prompt_plan_for_manifest,
+)
 
 
 MAX_FINAL_VERIFICATION_DIRECTIVE_LINES = 40
@@ -35,8 +39,7 @@ _NON_BODY_PREFIXES = (
     "**Audit sidecar path:**",
     "Assigned worker prompt history path:",
     "**Worker Preamble Path:**",
-    "**Errors log path:**",
-    "**Errors sidecar path:**",
+    *ERRORS_PATH_HEADERS,
     "**Read scope:**",
     "**Worktree:**",
     "**Verification scope:**",
@@ -231,8 +234,15 @@ def _validate_prompt_for_plan(
 ) -> list[str]:
     errors: list[str] = []
     _require_non_empty_header(text, _WORKER_ERROR_CONTRACT_HEADER, errors)
+    # The compact final-verification contract below returns early, so the plan's
+    # own required headers must be checked before that branch or they never are.
+    for prefix in plan.required_headers:
+        _require_non_empty_header(text, prefix, errors)
     if manifest.get("taskType") == "final-verification" and plan.audience == "analysis":
-        return [*errors, *validate_final_verification_initial_prompt(text)]
+        # Compact target identity re-checks headers the loop above already
+        # required, so drop the repeats and report each violation once.
+        compact = validate_final_verification_initial_prompt(text)
+        return errors + [error for error in compact if error not in errors]
     if not plan.allow_coding_preflight:
         _reject_literal(
             text,
@@ -240,8 +250,6 @@ def _validate_prompt_for_plan(
             "Coding preflight pack is forbidden for this prompt audience",
             errors,
         )
-    for prefix in plan.required_headers:
-        _require_non_empty_header(text, prefix, errors)
     if plan.audience == "analysis":
         packet_count = len(_PRIMARY_PACKET_RE.findall(text))
         if packet_count != 1:

package/runtime/python/okstra_ctl/worker_prompt_policy.py

@@ -17,6 +17,14 @@ PromptAudience = Literal[
 # The prompt emitter, the run validator, and the worker-facing docs all bind to
 # this literal; restating it anywhere else silently forks the dispatch contract.
 GRILLING_LOG_HEADER = "**Phase 1.5 Grilling Log:**"
+# Workers extract both paths verbatim and abort with
+# `<SENTINEL_PREFIX>_ERRORS_PATH_MISSING` when either is absent, because
+# synthesizing them from a run-directory pattern is forbidden. A prompt that
+# reaches a worker without them yields an empty run-level errors log.
+ERRORS_PATH_HEADERS = (
+    "**Errors log path:**",
+    "**Errors sidecar path:**",
+)
 FINAL_VERIFICATION_HEADERS = (
     "**Worktree:**",
     "**Verification scope:**",
@@ -137,12 +145,22 @@ def _plan(
         equality_group=equality_group,
         packet_only=packet_only,
         allow_coding_preflight=allow_coding_preflight,
-        required_headers=required_headers,
+        required_headers=_worker_facing_headers(audience, required_headers),
         max_body_lines=max_body_lines,
         max_directive_lines=max_directive_lines,
     )
 
 
+def _worker_facing_headers(
+    audience: PromptAudience,
+    required_headers: tuple[str, ...],
+) -> tuple[str, ...]:
+    """Prepend the errors-path pair every prompt that reaches a worker carries."""
+    if audience == "lead-only":
+        return required_headers
+    return (*ERRORS_PATH_HEADERS, *required_headers)
+
+
 def _executor_worker_id(manifest: Mapping[str, Any]) -> str | None:
     team_contract = manifest.get("teamContract")
     if not isinstance(team_contract, Mapping):

package/runtime/python/okstra_vendor/__init__.py

@@ -11,12 +11,6 @@ Currently vendored:
   - markupsafe 3.0.3 (BSD-3-Clause) — jinja2 dependency. C extension
     (`_speedups.c` / `_speedups.pyi`) is stripped; the pure-python
     `_native` fallback is used at import time.
-  - networkx (BSD-3-Clause) — graph model + community detection for okstra-graphify.
-    Per-package `tests/` suites and the top-level `conftest.py` are stripped;
-    okstra never runs networkx's own test suite. On re-vendor, drop every
-    `**/tests/` directory and `conftest.py` again.
-  - graphify 0.4.23 (MIT) — knowledge-graph pipeline for okstra-graphify. tree-sitter
-    native bindings are NOT vendored; okstra-graphify only indexes .okstra/ docs.
 
 Source provenance and licenses are preserved verbatim under each
 sub-package. Do not edit vendored files in place — re-vendor from PyPI
@@ -28,21 +22,8 @@ re-routing, those would either fail (no system install) or resolve to
 unrelated user-installed copies. We register the vendored copies in
 `sys.modules` under their canonical top-level names so jinja2's internal
 imports find them deterministically.
-
-networkx and graphify need a stronger mechanism than jinja2/markupsafe.
-Both use *self-referential* absolute imports (networkx's `__init__` does
-`from networkx.lazy_imports import ...`; graphify submodules do `import
-networkx`). Those fire while the package body is still executing, before a
-post-hoc `sys.modules.setdefault` could run — so on a machine that also has
-these libraries pip-installed globally, the self-import would resolve to the
-global copy and cache it under the canonical name. `_vendor_as_toplevel`
-registers the module in `sys.modules` under its canonical name *before*
-executing its body, so every self-referential import resolves back into the
-vendored tree deterministically. networkx is loaded before graphify because
-graphify's cluster/export/serve modules import networkx at module-load time.
 """
 
-import importlib.util as _importlib_util
 import sys as _sys
 
 # Register markupsafe alias BEFORE importing jinja2 — jinja2's __init__
@@ -54,28 +35,3 @@ _sys.modules.setdefault("markupsafe", _markupsafe)
 
 from . import jinja2 as _jinja2  # noqa: E402
 _sys.modules.setdefault("jinja2", _jinja2)
-
-
-def _vendor_as_toplevel(top_name, vendored_name):
-    """Load a vendored sub-package under its canonical top-level name.
-
-    Registers the module in ``sys.modules`` before executing its body so
-    that self-referential absolute imports inside the package resolve to the
-    vendored copy rather than a globally pip-installed one.
-    """
-    if top_name in _sys.modules:
-        return _sys.modules[top_name]
-    vendored_spec = _importlib_util.find_spec(vendored_name)
-    top_spec = _importlib_util.spec_from_file_location(
-        top_name,
-        vendored_spec.origin,
-        submodule_search_locations=list(vendored_spec.submodule_search_locations),
-    )
-    module = _importlib_util.module_from_spec(top_spec)
-    _sys.modules[top_name] = module
-    top_spec.loader.exec_module(module)
-    return module
-
-
-_networkx = _vendor_as_toplevel("networkx", __name__ + ".networkx")
-_graphify = _vendor_as_toplevel("graphify", __name__ + ".graphify")

package/runtime/schemas/final-report-v1.0.schema.json

@@ -446,6 +446,11 @@
           "items": { "$ref": "#/$defs/ImplementationRequirementCoverageRow" }
         },
         "planBodyVerification": { "$ref": "#/$defs/PlanBodyVerification" },
+        "supersessionLedger": {
+          "type": "array",
+          "description": "One entry per clarification this run answered, recording which plan statements the answer invalidated. Incorporating an answer by adding the new decision while leaving the contradicting sentence in place is what produces two opposite instructions for the same symbol in one plan.",
+          "items": { "$ref": "#/$defs/SupersessionEntry" }
+        },
         "crossProjectDependencies": {
           "type": "array",
           "items": { "$ref": "#/$defs/CrossProjectDependency" }
@@ -1256,7 +1261,8 @@
               "ticketId": { "$ref": "#/$defs/TicketId" },
               "action": { "enum": ["Create", "Modify", "Delete"] },
               "path": { "type": "string", "minLength": 1 },
-              "summary": { "type": "string", "minLength": 1 }
+              "summary": { "type": "string", "minLength": 1, "maxLength": 120 },
+              "details": { "type": "string", "minLength": 1 }
             }
           }
         },
@@ -1841,6 +1847,60 @@
       }
     },
 
+    "SelfFixGroup": {
+      "type": "object",
+      "required": ["round", "causeSummary", "itemIds"],
+      "additionalProperties": false,
+      "properties": {
+        "round": { "type": "integer", "minimum": 1 },
+        "causeSummary": { "type": "string", "minLength": 1 },
+        "itemIds": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
+
+    "SupersessionEntry": {
+      "type": "object",
+      "required": ["clarificationId", "disposition"],
+      "additionalProperties": false,
+      "properties": {
+        "clarificationId": { "type": "string", "pattern": "^C-\\d+$" },
+        "disposition": { "enum": ["superseded", "no-dependent-statement"] },
+        "revisedSections": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "supersededStatement": { "type": "string", "minLength": 1 },
+        "replacedWith": { "type": "string", "minLength": 1 },
+        "rationale": { "type": "string", "minLength": 1 }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": { "disposition": { "const": "superseded" } },
+            "required": ["disposition"]
+          },
+          "then": {
+            "required": ["revisedSections", "supersededStatement", "replacedWith"],
+            "properties": { "revisedSections": { "minItems": 1 } }
+          }
+        },
+        {
+          "if": {
+            "properties": {
+              "disposition": { "const": "no-dependent-statement" }
+            },
+            "required": ["disposition"]
+          },
+          "then": { "required": ["rationale"] }
+        }
+      ]
+    },
+
     "PlanBodyVerification": {
       "type": "object",
       "required": ["roundCount", "gateResult", "planItems", "dissentLog"],
@@ -1855,7 +1915,19 @@
             "aborted-non-result"
           ]
         },
+        "gateBlockedBy": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "enum": ["majority-disagree", "coverage-gap", "non-result"]
+          }
+        },
         "selfFixRoundsApplied": { "type": "integer", "minimum": 0 },
+        "selfFixGroups": {
+          "type": "array",
+          "description": "How each self-fix round's targets were grouped by common cause before being handed to report-writer. Several blocked items are usually one defect's derivatives; instructing them as a flat list makes each patch leave its siblings' contradictions standing, so the same family reappears next round.",
+          "items": { "$ref": "#/$defs/SelfFixGroup" }
+        },
         "selfFixStopReason": {
           "enum": [
             "not-attempted",
@@ -1893,8 +1965,14 @@
                     "verdict": {
                       "enum": ["AGREE", "DISAGREE", "SUPPLEMENT", "verification-error"]
                     },
-                    "breakageKind": { "type": "string" },
-                    "fixability": { "enum": ["planner-fixable", "needs-user-input"] },
+                    "breakageKind": {
+                      "description": "Set only on DISAGREE. `null` and absent are equivalent, matching the sibling `votes.<worker>.disagreeBasis` contract in prompts/lead/convergence.md.",
+                      "type": ["string", "null"]
+                    },
+                    "fixability": {
+                      "description": "Set only on DISAGREE. `null` and absent are equivalent.",
+                      "enum": ["planner-fixable", "needs-user-input", null]
+                    },
                     "note": { "type": "string" }
                   }
                 }
@@ -2105,9 +2183,9 @@
       "additionalProperties": false,
       "properties": {
         "number": { "type": "integer", "minimum": 1 },
-        "tier": { "enum": [1, 2] },
+        "tier": { "enum": [1, 2, 3] },
         "command": { "type": "string", "minLength": 1 },
-        "status": { "enum": ["executed", "rejected", "not-configured", "env-unavailable"] },
+        "status": { "enum": ["executed", "rejected", "not-configured", "env-unavailable", "advisory"] },
         "exitCode": { "type": ["integer", "null"] },
         "statusReason": { "type": ["string", "null"] },
         "outputTail": { "type": "string" }
@@ -2118,7 +2196,24 @@
         { "if": { "properties": { "status": { "const": "rejected" } } },
           "then": { "required": ["statusReason"] } },
         { "if": { "properties": { "status": { "const": "env-unavailable" } } },
-          "then": { "required": ["statusReason"] } }
+          "then": { "required": ["statusReason"] } },
+        {
+          "if": {
+            "properties": { "status": { "const": "advisory" } },
+            "required": ["status"]
+          },
+          "then": {
+            "required": ["statusReason"],
+            "properties": {
+              "tier": { "const": 3 },
+              "statusReason": {
+                "type": "string",
+                "minLength": 1,
+                "pattern": ".*\\S.*"
+              }
+            }
+          }
+        }
       ]
     },
 

package/runtime/skills/okstra-run/SKILL.md

@@ -201,11 +201,18 @@ The python function underneath is mutex-protected (`~/.okstra/.locks/<task-key>.
 
 You can delete the literal state-file path after this point — its job is done. Invoke `rm` with the literal path (e.g. `rm /var/folders/.../okstra-wizard.AbCd.json`), not a shell variable.
 
-### Step 5.1 (implementation only): conformance waiver offer
+### Step 5.1 (implementation only): blocking local conformance waiver offer
 
-`render-bundle` accepts an optional `--qa-waiver "<stageKey>:<reason>"` flag (implementation only). It records a **user-acknowledged** waiver into the task-level conformance manifest entry (`entry.waiver`), letting the run proceed when a stage's Tier 3 conformance script genuinely cannot run (e.g. the replica DB is unreachable). The waiver records the user's reason **verbatim**.
+`render-bundle` accepts an optional `--qa-waiver "<stageKey>:<reason>"` flag (implementation only). It records a **user-acknowledged** waiver into the task-level conformance manifest entry (`entry.waiver`), letting the run proceed when an `io`-only Tier 3 conformance script genuinely cannot run. The waiver records the user's reason **verbatim**.
 
-This is **never** a lead/worker self-exemption — only the user may waive. Offer it **only** when conformance BLOCKING is expected (the chosen stage declares a conformance entry whose script you cannot run in this environment). Surface it as a 3-option recommendation picker (per the run-prompt recommendation rule):
+Inspect the selected manifest entry's `requires`. If it contains `db`, `http`,
+or `external`, it is external-advisory: Do not offer a waiver and continue so
+the verifier can attempt automatic startup/execution. A non-PASS outcome will
+become a user-owned follow-up. If `requires=[]`, fail closed as declaration or
+contract trouble: Do not offer a waiver for `requires=[]`. Offer the existing
+waiver picker only when `requires=[io]` and that local command genuinely cannot run.
+
+This is **never** a lead/worker self-exemption — only the user may waive. After classification confirms `requires=[io]`, surface it as a 3-option recommendation picker (per the run-prompt recommendation rule):
 
 1. (recommended) Run the conformance script — no waiver.
 2. Waive this stage — ask the user for the exact `<stageKey>` and reason, then pass `--qa-waiver "<stageKey>:<reason>"` to `render-bundle` (reason = the user's words, unedited).
@@ -249,7 +256,7 @@ When `task-type == implementation` and Step 5 render-args' `chain-stages` CSV ha
 
 Queue = the topologically-sorted stage list from splitting `chain-stages` on `,` (the order Task 5 emitted by topologically sorting the dependency closure). For each stage `N` in the queue, in order:
 
-1. Call Step 5's `render-bundle` with the same arguments but `--stage N` (the base commit is auto-computed by prepare from the predecessor's done `head_commit`, so do not pass it by hand). Step 5's conformance waiver offer·concurrent-run detection·git-reconcile gates apply identically to each stage's `render-bundle`.
+1. Call Step 5's `render-bundle` with the same arguments but `--stage N` (the base commit is auto-computed by prepare from the predecessor's done `head_commit`, so do not pass it by hand). Step 5's blocking local conformance waiver offer·concurrent-run detection·git-reconcile gates apply identically to each stage's `render-bundle`.
 2. As in Step 6, become Claude lead and run that stage's Phase 1–7 inline. Phase 6's lead post-stage persistence appends that stage's `status:"done"` row to `runs/<plan-task-key>/consumers.jsonl` (per the implementation profile directive).
 3. After confirming that `done` row was written, move to the next stage. Clean up context at each stage boundary (leftover panes·finished teammates from the previous batch).
 4. One-line report at each stage start/finish: `stage N/<total> start` / `stage N done → next K`.

package/runtime/skills/okstra-setup/SKILL.md

@@ -107,8 +107,9 @@ matching section:
 - **A. worktree sync dirs** (`worktreeSyncDirs`) — extra directories symlinked
   into task worktrees.
 - **B. project QA commands** (`qaCommands`, recommended) + **B.1 `qaEnv`** —
-  check-only lint/format/typecheck/test baseline and the Tier 3 conformance
-  environment the `implementation` verifiers use.
+  check-only lint/format/typecheck/test baselines and the Tier 3 environment.
+  Local `io` conformance is blocking; DB/HTTP/external QA is advisory and
+  remains user-owned when automatic execution cannot PASS.
 - **C. `.claude/settings.local.json` symlink** — automatic; read only to
   diagnose a symlink/backup warning.
 - **D. PR body template** (release-handoff) — opt-in pre-registration; also

package/runtime/skills/okstra-setup/references/project-config.md

@@ -86,6 +86,15 @@ prove the diff satisfies upstream requirements. Declare the environment those
 scripts are allowed to touch under `qaEnv`. Every field is optional; declare
 only what your conformance scripts use.
 
+`qaEnv` lets Okstra attempt Tier 3 automatically; it does not transfer
+ownership of a real DB/API check to the run. Entries requiring `db`, `http`,
+or `external` are advisory: a missing environment or non-PASS result is
+reported with an exact rerun method but does not block the run. `io`-only
+conformance stays blocking. Remote IO should also declare `external`; this is
+an authoring guideline, not an automatically detected contract. Gate outcomes
+are enforced by `scripts/okstra_ctl/conformance.py::decide_conformance_gate`
+and `validators/validate-run.py::_validate_conformance`.
+
 ```json
 "qaEnv": {
   "replicaDbDsn": "<replica/test DB DSN — never shared/staging/prod>",
@@ -104,13 +113,13 @@ only what your conformance scripts use.
   before running conformance scripts.
 - `surfacePatterns` — per-project **override** of the diff-surface cross-check
   map (`capability → glob list`). The validator maps each changed file to a
-  capability surface (`db` / `http` / `io`) and fails the run when the diff
-  touches a surface no stage `requires`. The built-in patterns (e.g. `*router*`
-  for `http`, `*storage*` for `io`) are broad and match many front-end files,
-  so front-end-heavy repos should override with narrower globs to avoid false
-  BLOCKING verdicts. An over-broad pattern over-blocks; an over-narrow one
-  lets an undeclared surface through — tune to the repo's real db/http/io file
-  naming.
+  capability surface (`db` / `http` / `io`) and fails the declaration contract
+  when the diff touches a surface no stage `requires`. The built-in patterns
+  (e.g. `*router*` for `http`, `*storage*` for `io`) are broad and match many
+  front-end files, so front-end-heavy repos should override with narrower globs
+  to avoid false BLOCKING verdicts. An over-broad pattern over-blocks; an
+  over-narrow one lets an undeclared surface through — tune to the repo's real
+  db/http/io file naming.
 
 ## C. Project-local Claude settings symlink (automatic — diagnostics only)
 

package/runtime/templates/reports/final-report.template.md

@@ -204,10 +204,10 @@ Carried-forward plan items retain their prior verdicts verbatim; each such item
 
 - File Structure:
 
-  | ID | Ticket ID | Action | Path (and line-range) | Change summary |
-  |----|-----------|--------|------------------------|----------------|
+  | {{ t("columns.recordMeta") }} | Path (and line-range) | Change summary |
+  |------|------------------------|----------------|
 {% for fs in opt.fileStructure -%}
-  | {{ fs.id | mdcell }} | `{{ fs.ticketId | mdcell }}` | {{ fs.action | mdcell }} | `{{ fs.path | mdcell }}` | {{ fs.summary | mdcell }} |
+  | **{{ fs.id | mdcell }}**<br>Ticket: `{{ fs.ticketId | mdcell }}`<br>Action: {{ fs.action | mdcell }} | `{{ fs.path | mdcell }}` | {{ fs.summary | mdcell }}{% if fs.details %}<br><small>{{ fs.details | mdcell }}</small>{% endif %} |
 {% endfor %}
 
 - {{ t("implementationPlanning.optionInterfacesLabel") }}: {{ opt.interfaces }}
@@ -358,8 +358,11 @@ Carried-forward plan items retain their prior verdicts verbatim; each such item
 
 - **Round count**: `{{ implementationPlanning.planBodyVerification.roundCount }}`
 - **Gate result**: `{{ implementationPlanning.planBodyVerification.gateResult }}`
-
+{% if implementationPlanning.planBodyVerification.gateBlockedBy %}- **Blocked by**: {% for cause in implementationPlanning.planBodyVerification.gateBlockedBy %}`{{ cause }}`{% if not loop.last %}, {% endif %}{% endfor %}
+{% endif %}
 > {{ t("implementationPlanning.planBodyGateLegend") }}
+>
+> {{ t("implementationPlanning.planBodyBlockedByLegend") }}
 
 #### Verdict details
 
@@ -703,7 +706,7 @@ Carried-forward plan items retain their prior verdicts verbatim; each such item
 | # | Tier | Command (verbatim) | Status | Exit code | Output tail |
 |---|------|---------------------|--------|-----------|-------------|
 {% for row in finalVerification.readonlyCommandLog -%}
-| {{ row.number | mdcell }} | {{ row.tier | mdcell }} | `{{ row.command | mdcell }}` | `{{ row.status | mdcell }}` | {{ (row.exitCode if row.exitCode is not none else '—') | mdcell }} | {{ (row.statusReason if row.status in ['rejected', 'env-unavailable'] else row.outputTail) | mdcell }} |
+| {{ row.number | mdcell }} | {{ row.tier | mdcell }} | `{{ row.command | mdcell }}` | `{{ row.status | mdcell }}` | {{ (row.exitCode if row.exitCode is not none else '—') | mdcell }} | {{ (row.statusReason if row.status in ['rejected', 'env-unavailable', 'advisory'] else row.outputTail) | mdcell }} |
 {% endfor %}
 
 ### 5.8.6 Conditional Acceptance Conditions
@@ -736,24 +739,27 @@ Carried-forward plan items retain their prior verdicts verbatim; each such item
 
 ### 5.8.9 Could-Not-Verify Roll-up
 
-Single scan of every agreed check that this run did NOT confirm — requirement gaps, commands not run (rejected / not-configured / env-unavailable), and blocked manual tests — aggregated from the sections above.
+Single scan of every agreed check that this run did NOT confirm — requirement gaps, commands not run (rejected / not-configured / env-unavailable), advisory commands, and blocked manual tests — aggregated from the sections above.
 
-{% set nv = namespace(any=false) -%}
 {% for row in finalVerification.validationEvidence if row.status == 'gap' -%}
-{% set nv.any = true -%}
 - `{{ row.id | mdcell }}` requirement gap — {{ row.requirement | mdcell }}
 {% endfor -%}
-{% for row in finalVerification.readonlyCommandLog if row.status in ['rejected', 'not-configured', 'env-unavailable'] -%}
-{% set nv.any = true -%}
+{% for row in finalVerification.readonlyCommandLog if row.status in ['rejected', 'not-configured', 'env-unavailable', 'advisory'] -%}
 - `{{ row.command | mdcell }}` — {{ row.status | mdcell }}: {{ row.statusReason | mdcell }}
 {% endfor -%}
 {% if finalVerification.manualUserTest.applicable -%}
 {% for row in finalVerification.manualUserTest.results if row.result == 'blocked' -%}
-{% set nv.any = true -%}
 - manual: {{ row.target | mdcell }} — {{ row.performed | mdcell }} (blocked): {{ row.observed | mdcell }}
 {% endfor -%}
 {% endif -%}
-{% if not nv.any -%}
+{% if not (
+  finalVerification.validationEvidence | selectattr('status', 'equalto', 'gap') | list
+  or finalVerification.readonlyCommandLog | selectattr('status', 'in', ['rejected', 'not-configured', 'env-unavailable', 'advisory']) | list
+  or (
+    finalVerification.manualUserTest.applicable
+    and finalVerification.manualUserTest.results | selectattr('result', 'equalto', 'blocked') | list
+  )
+) -%}
 - All agreed checks were executed or covered — nothing left unverified.
 {%- endif %}
 

package/runtime/templates/reports/i18n/en.json

@@ -103,6 +103,7 @@
   },
   "implementationPlanning": {
     "planBodyGateLegend": "Gate values — `passed`: agreed, no dissent · `passed-with-dissent`: a minority dissent remains but the gate passes (a majority dissent would block approval) · `blocked-by-disagreement`: majority dissent blocks approval · `aborted-non-result`: verification itself produced no result.",
+    "planBodyBlockedByLegend": "Which input blocked the gate — `majority-disagree`: a worker majority dissent · `coverage-gap`: a Requirement Coverage gap / blocked row, independent of worker votes · `non-result`: verification produced no result. Absent means nothing blocked.",
     "planBodyVerdictLegend": "Verdict — **AGREE**: executable as written and internally consistent with other items · **SUPPLEMENT**: item is sound but a dependency / edge case / precondition is missing · **DISAGREE**: has a defect (see Breakage kind) · **verification-error**: the worker produced no result.",
     "planBodyBreakageLegend": "Breakage kind — a: cited file path/symbol mismatches another step or option · b: command is not executable or is ambiguous · c: validation signal is not observable · d: rollback violates commit/dependency order · e: contradicts the trade-off matrix · f: requirement-coverage row does not map to an option/stage/step that actually satisfies the requirement. (`--` = not applicable) Fixability: planner-fixable = correctable from code + plan + brief; needs-user-input = requires an external decision.",
     "planBodySourceLabel": "source §",

package/runtime/templates/reports/i18n/ko.json

@@ -103,6 +103,7 @@
   },
   "implementationPlanning": {
     "planBodyGateLegend": "게이트 결과 값 뜻 — `passed`: 이견 없이 통과 · `passed-with-dissent`: 소수 워커의 반대가 남았으나 통과(반대가 다수였다면 승인 차단) · `blocked-by-disagreement`: 다수 반대로 승인 차단 · `aborted-non-result`: 검증 자체가 결과를 내지 못함.",
+    "planBodyBlockedByLegend": "게이트를 막은 입력 — `majority-disagree`: 워커 다수 반대 · `coverage-gap`: Requirement Coverage 의 gap / blocked 행(워커 반대와는 무관) · `non-result`: 검증 자체가 결과를 내지 못함. 이 항목이 없으면 차단 원인이 없다는 뜻이다.",
     "planBodyVerdictLegend": "판정(Verdict) — **AGREE**: 적힌 대로 실행 가능하고 다른 항목과 내부적으로 일관됨 · **SUPPLEMENT**: 항목 자체는 타당하나 의존성·엣지케이스·전제조건이 누락됨 · **DISAGREE**: 결함이 있음(결함 유형 참조) · **verification-error**: 워커 검증이 결과를 내지 못함.",
     "planBodyBreakageLegend": "결함 유형(Breakage kind) — a: 인용한 파일 경로/심볼이 다른 스텝·옵션과 불일치 · b: 명령이 실행 불가하거나 모호함 · c: 검증 신호가 관측 불가 · d: 롤백이 커밋/의존성 순서를 위반 · e: 트레이드오프 매트릭스와 모순 · f: 요구사항 커버리지 행이 요구사항을 실제로 충족하는 옵션/스테이지/스텝에 매핑되지 않음. (`--` = 해당 없음) · 자가수정 가능 여부(Fixability) — planner-fixable: 코드·계획·브리프만으로 수정 가능 · needs-user-input: 외부 결정 필요",
     "planBodySourceLabel": "출처 §",

package/runtime/templates/reports/report.css

@@ -188,6 +188,24 @@ td.td-narrow, th.td-narrow {
   width: 5%;
   white-space: nowrap;
 }
+/* Path columns — assigned by `_path_columns()` in report_views.py. A
+ * repo-relative path holds no spaces, so the `overflow-wrap: anywhere`
+ * above lets the auto table layout starve the column down to a couple of
+ * characters per line. Floor the width and let it wrap at separators. */
+td.td-path, th.td-path {
+  min-width: 26ch;
+  word-break: break-word;
+}
+
+/* Second line of a two-tier cell: the plain-language summary leads, the
+ * technical detail follows demoted. */
+td small {
+  display: inline-block;
+  margin-top: 0.35em;
+  font-size: 0.88em;
+  color: GrayText;
+}
+
 thead th {
   position: sticky;
   top: 3rem;

package/runtime/validators/lib/fixtures.sh

@@ -133,6 +133,9 @@ prompt_path.write_text(
     "\n".join(
         [
             "**Worker Error Contract Path:** /okstra/templates/worker-error-contract.md",
+            f"**Errors log path:** {project_root}/run/logs/errors.jsonl",
+            f"**Errors sidecar path:** {project_root}/run/worker-results/"
+            f"{target_worker_id}-errors.json",
             f"Assigned worker prompt history path: {prompt_relative}",
             f"- Primary analysis packet: `{analysis_packet_path}`",
             "",
@@ -223,6 +226,9 @@ for worker in team_state.get("workers", []):
         prompt_path.parent.mkdir(parents=True, exist_ok=True)
         prompt_lines = [
             "**Worker Error Contract Path:** /okstra/templates/worker-error-contract.md",
+            f"**Errors log path:** {project_root}/run/logs/errors.jsonl",
+            f"**Errors sidecar path:** {project_root}/run/worker-results/"
+            f"{worker_id}-errors.json",
             f"Assigned worker prompt history path: {prompt_relative}",
         ]
         if worker_id != "report-writer":