okstra 0.168.0 → 0.169.1

package/runtime/python/okstra_ctl/adapters/hosts/capability_adapter.py

@@ -23,11 +23,13 @@ from okstra_ctl.domain.wizard.interaction import (
     WizardPrompt,
 )
 from okstra_ctl.ports import (
+    HostModelBindingPort,
     InteractionPort,
     LeadSessionPort,
     UsageAccountingPort,
     WorkerDispatchPort,
 )
+from okstra_ctl.ports.host_model import FailClosedHostModelBindingPort
 from okstra_ctl.registry.provider_registry import (
     ProviderRegistry,
     default_provider_registry,
@@ -37,6 +39,7 @@ from okstra_ctl.registry.provider_registry import (
 @dataclass(frozen=True)
 class HostPorts:
     interaction: InteractionPort
+    host_model: HostModelBindingPort
     lead_session: LeadSessionPort
     worker_dispatch: WorkerDispatchPort
     usage_accounting: UsageAccountingPort
@@ -203,6 +206,7 @@ class CapabilityHostAdapter:
         readiness_probe: Callable[
             [HostSessionContext], tuple[Mapping[str, object], ...]
         ] | None = None,
+        host_model_port: HostModelBindingPort | None = None,
     ) -> None:
         self.descriptor = descriptor
         self._executable_finder = executable_finder
@@ -222,6 +226,7 @@ class CapabilityHostAdapter:
             )
         self._ports = HostPorts(
             interaction_port,
+            host_model_port or FailClosedHostModelBindingPort(descriptor.id),
             resolved_lead_session,
             resolved_worker_dispatch,
             usage_accounting_port,
@@ -256,6 +261,9 @@ class CapabilityHostAdapter:
     def interaction(self) -> InteractionPort:
         return self._ports.interaction
 
+    def host_model(self) -> HostModelBindingPort:
+        return self._ports.host_model
+
     def lead_session(self) -> LeadSessionPort:
         return self._ports.lead_session
 

package/runtime/python/okstra_ctl/adapters/hosts/claude-code/adapter.py

@@ -15,6 +15,10 @@ from okstra_ctl.adapters.hosts.capability_adapter import (
     numbered_interaction_port,
 )
 from okstra_ctl.domain.host import HostClaim, HostDescriptor, HostResolutionContext
+from okstra_ctl.ports.host_model import (
+    HostModelBindingError,
+    HostModelBindingRequest,
+)
 from okstra_ctl.registry.provider_registry import ProviderRegistry
 
 
@@ -35,6 +39,33 @@ DESCRIPTOR = HostDescriptor(
 )
 
 
+class ClaudeFamilyHostModelBindingPort:
+    _FAMILIES = ("fable", "opus", "sonnet", "haiku")
+
+    def resolve(self, request: HostModelBindingRequest) -> str | None:
+        if request.runner == "cli-wrapper":
+            return None
+        if (
+            request.runner != "native-session"
+            or request.host_runtime != DESCRIPTOR.id
+            or request.provider != DESCRIPTOR.native_provider_id
+        ):
+            raise self._unsupported(request)
+        segments = request.model_execution_value.lower().split("-")
+        matches = [family for family in self._FAMILIES if family in segments]
+        if len(matches) != 1:
+            raise self._unsupported(request)
+        return matches[0]
+
+    @staticmethod
+    def _unsupported(request: HostModelBindingRequest) -> HostModelBindingError:
+        return HostModelBindingError(
+            "unsupported host model: "
+            f"host={request.host_runtime!r}, provider={request.provider!r}, "
+            f"model={request.model_execution_value!r}"
+        )
+
+
 def _detect_claude_skill_handoff(
     context: HostResolutionContext,
 ) -> HostClaim | None:
@@ -101,6 +132,7 @@ def create_adapter(
     worker_dispatch_port=PENDING_HOST_PORT,
     usage_accounting_port=ClaudeJsonlUsageAccountingPort(),
     provider_registry: ProviderRegistry | None = None,
+    host_model_port=None,
 ) -> CapabilityHostAdapter:
     return CapabilityHostAdapter(
         DESCRIPTOR,
@@ -117,4 +149,5 @@ def create_adapter(
         detector=_detect_claude_skill_handoff,
         provider_registry=provider_registry,
         readiness_probe=_workspace_trust_checks,
+        host_model_port=host_model_port or ClaudeFamilyHostModelBindingPort(),
     )

package/runtime/python/okstra_ctl/adapters/hosts/claude-code/relay.md

@@ -136,9 +136,9 @@ For a `host-text` mapping, render each numbered item as its option label followe
 | `read_artifacts` | Use the host file-read primitive and preserve the core contract's read order. |
 | `write_artifact` | Use the host file-write primitive only for paths authorized by the active lifecycle phase. |
 | `prompt_user` | Use the native question tool for approvals and clarifications; do not infer an answer from silence. |
-| `dispatch_worker` | Dispatch each assignment through `Agent(name: "<role>", run_in_background: true)` without `team_name`; use an in-process worker for `runner=native-session` and the assigned provider's wrapper worker for `runner=cli-wrapper`. **Not in a cmux run:** when the run manifest's `terminalBackend` is `cmux-pane`, `prompts/lead/adapters/cmux.md` overrides this row — start every worker with `okstra team dispatch`, this host's native path included, so okstra owns the panes and the user can watch the work. |
+| `dispatch_worker` | First verify the materialized invocation metadata. Dispatch `runner=native-session` through `Agent(name: "<role>", run_in_background: true)` without `team_name`, passing the verified final prompt and `hostModelValue`. Dispatch `runner=cli-wrapper` with the deterministic shell command `okstra worker-dispatch --project-root <root> --run-manifest <path> --workers <ids>`; never wrap that process in another `Agent(...)` call. **Not in a cmux run:** when the run manifest's `terminalBackend` is `cmux-pane`, `prompts/lead/adapters/cmux.md` overrides this row. |
 | `await_workers` | Arm one background shell poll for the pending Result Paths; the spawn acknowledgement is not completion. |
-| `redispatch_worker` | Dispatch a fresh `Agent(...)` session with the same prompt plus the core reverify/retry reason. |
+| `redispatch_worker` | Materialize and verify a fresh invocation, then use a fresh native `Agent(...)` session or `okstra worker-dispatch` attempt according to the persisted runner. |
 | `shutdown_workers` | For each confirmed-complete worker selected for cleanup, send `SendMessage(to: <name>, message: { type: "shutdown_request" })` to idle the roster member **and** call `TaskStop(task_id: "<name>")` to stop its background task. Both are required; neither subsumes the other. |
 | `record_lead_event` | Emit the required `PROGRESS:` line as assistant text and persist core-required state/artifact updates. |
 | `collect_usage` | Run `okstra token-usage` against the team-state; it reads the run-scoped `~/.claude/projects` session JSONL evidence. |
@@ -147,27 +147,28 @@ For a `host-text` mapping, render each numbered item as its option label followe
 
 - The session owns one implicit team. `TeamCreate` and `TeamDelete` are absent on current Claude Code builds; never probe for them and never pass `team_name`.
 - Set `name` to the core-assigned functional role label so token attribution can match `agentName`.
-- Map a `runner=native-session` Claude assignment to `claude-worker`. Map a `runner=cli-wrapper` assignment to `<provider>-worker`; the registered providers currently resolve to `claude-worker`, `codex-worker`, `antigravity-worker`, `grok-worker`, or `kimi-worker`. The functional `report-writer` worker ID does not override its provider assignment. Never substitute `general-purpose` for a rostered worker.
-- For `runner=native-session`, map `modelExecutionValue` to the supported Claude family token and pass it as the `model` argument. CLI-wrapper roles apply their exact model in the provider wrapper and remain `inherit` at the Agent layer.
+- Map a `runner=native-session` Claude assignment to the real host execution definition for its function (`claude-worker`, `report-writer-worker`, or `translator-worker`). A CLI-wrapper assignment has no Claude agent definition; `worker-dispatch` starts its registered provider process directly.
+- For `runner=native-session`, pass the persisted `hostModelValue` as the `model` argument. For `runner=cli-wrapper`, `worker-dispatch` passes the persisted `modelExecutionValue` to the provider process. Never interchange the two fields.
+- Immediately before every native host primitive, run `okstra agent-prompt record-dispatch` with the project root, run manifest, verified metadata path, and `--enforcement-mode host-native-spec-link-gate`. After the Result Path exists, run `okstra agent-prompt link-result` with `--dispatch-id <invocationId>:attempt-1` and that path before accepting or parsing it. CLI-wrapper calls are recorded by `worker-dispatch` itself.
 - A resumed lead can dispatch a fresh worker; resume is not a valid reason to omit a rostered role.
 
 ### Dispatch-time model enforcement
 
-- A native Claude worker definition declares `model: inherit`; the lead MUST override that default by passing the assigned family token (`fable`, `opus`, `sonnet`, or `haiku`) as the `Agent(...)` `model` argument.
-- Every CLI-wrapper agent remains `inherit` at the Agent layer because its exact `modelExecutionValue` is applied by `okstra-claude-exec.sh`, `okstra-codex-exec.sh`, `okstra-antigravity-exec.sh`, `okstra-grok-exec.sh`, or `okstra-kimi-exec.sh` according to the assignment provider.
+- A native Claude execution definition declares `model: inherit`; the lead MUST override it with the verified assignment's `hostModelValue`.
+- CLI-wrapper assignments never enter the Agent layer. `okstra worker-dispatch` validates the metadata and passes `modelExecutionValue` to the registered provider script.
 - Missing or unsupported family-token mapping is a pre-dispatch contract failure. Never inherit the lead model, choose a nearby alias, or switch provider silently.
 - Every analysis dispatch sets `name: "<workerId>-worker"`; convergence retries append `-reverify-r<N>`, implementation uses the functional `-executor` / `-verifier` suffix, and report writing uses `report-writer`. These values are retained as `agentName` in session JSONL for usage attribution.
 - Every CLI-worker prompt includes `**Pane role:** <functional-role>` so the entrypoint's optional fifth argument carries the dispatched role. That argument selects the dispatch's idle budget — `executor` and `verifier` run silent build+test suites and get 1500s, every other role 600s — and is recorded in the run's status sidecar. Omitting it defaults to `worker`, i.e. the short budget, which reaps a healthy build mid-suite.
-- The Agent SDK may supply transport metadata through the in-process worker definition, but the persisted semantic prompt body and primary analysis-packet input remain identical to the CLI-wrapper workers after permitted identity/path normalization.
+- The host may supply transport metadata for native calls, but acceptance records only the verified invocation specification link. Record `enforcementMode=host-native-spec-link-gate`, `promptPath`, and `metadataPath`; do not claim the host-delivered bytes were observed.
 - A retry keeps the same Agent `name`. When logging a twice-failed CLI-wrapper attempt, reference both attempts' `bash_ids` and prompt-history paths.
 - An internally detected contract violation without a specific worker uses `--agent "claude-lead"` in the error-log event.
 
 ### Reverify, critic, and report-writer assignments
 
 - For convergence reverify, consume the persisted round plan exactly. This adapter may map and transport each returned batch, but it cannot change batch membership and does not classify findings or branch on task type, provider, or model identity.
-- Reverify dispatch uses a fresh one-shot `Agent(...)` call named `<workerId>-worker-reverify-r<N>`. Preserve the initial worker's definition and map an in-process Claude assignment's `modelExecutionValue` to its exact family token; CLI-wrapper assignments remain `inherit` at the Agent layer and apply the exact model in their wrapper.
+- Reverify dispatch materializes `reverification-worker`, verifies its metadata, then uses a fresh one-shot native call named `<workerId>-worker-reverify-r<N>` or a fresh deterministic `worker-dispatch` attempt according to the persisted runner.
 - Critic dispatch uses `name: "<provider>-worker-critic"`, `dispatchKind: "critic"`, and the exact mapped model from `config.critic.modelExecutionValue`. If that value cannot be mapped, record `critic-skipped: model-unresolved` and do not dispatch.
-- Report-writer dispatch uses `name: "report-writer"`. A native Claude assignment maps `modelExecutionValue` to the supported family token; a CLI-wrapper assignment remains `inherit` at the Agent layer and applies the exact value in its provider wrapper. The prompt's `**Model:**` header must carry the same execution value.
+- Report-writer dispatch uses `name: "report-writer"` only for a native Claude assignment and passes `hostModelValue`. A CLI assignment goes through `worker-dispatch` with `modelExecutionValue`.
 - Each variant persists its prompt path, Result Path, worker-results path, error paths, and `dispatchKind` before dispatch. Completion uses the shared background Result Path poll; an Agent acknowledgement never completes the variant.
 
 ## Completion, cleanup, and resume
@@ -180,12 +181,12 @@ For a `host-text` mapping, render each numbered item as its option label followe
 - On approved cleanup, reconcile the current live session roster before sending shutdown requests. Never target the lead session.
 - Collect usage before teardown. Resume through the recorded Claude session id and keep all run artifacts authoritative.
 
-### CLI-wrapper polling
+### CLI process polling
 
-- Start the assignment's registered wrapper (`okstra-claude-exec.sh`, `okstra-codex-exec.sh`, `okstra-antigravity-exec.sh`, `okstra-grok-exec.sh`, or `okstra-kimi-exec.sh`) with `Bash(run_in_background: true)` and poll `BashOutput(bash_id)` back-to-back until terminal completion. Never add a foreground sleep.
+- Start `okstra worker-dispatch` with `Bash(run_in_background: true)` and poll `BashOutput(bash_id)` back-to-back until terminal completion. The deterministic dispatcher starts the registered provider script after metadata verification. Never add a foreground sleep.
 - Return accumulated stdout on success. On a non-zero `exit_code`, record the real code and observed duration.
 - At the 1800-second cap, inspect the live log mtime once. Recent output grants one extension to 2100 seconds; otherwise call `KillShell(shell_id)`, record exit code 124, and return the wrapper timeout sentinel.
-- Keep the wrapper subagent alive throughout polling so its JSONL timestamp window covers the underlying CLI rollout.
+- Keep the background process handle until the provider process reaches terminal state.
 
 ### Session accounting
 

package/runtime/python/okstra_ctl/adapters/hosts/codex/adapter.py

@@ -14,6 +14,7 @@ from okstra_ctl.adapters.hosts.capability_adapter import (
     numbered_interaction_port,
 )
 from okstra_ctl.domain.host import HostDescriptor
+from okstra_ctl.ports.host_model import NativeExecutionValueHostModelBindingPort
 from okstra_ctl.registry.provider_registry import ProviderRegistry
 
 
@@ -42,6 +43,7 @@ def create_adapter(
     worker_dispatch_port=PENDING_HOST_PORT,
     usage_accounting_port=CliArtifactUsageAccountingPort(),
     provider_registry: ProviderRegistry | None = None,
+    host_model_port=None,
 ) -> CapabilityHostAdapter:
     return CapabilityHostAdapter(
         DESCRIPTOR,
@@ -57,4 +59,8 @@ def create_adapter(
         supported_functions=INTERACTION_FUNCTIONS,
         detector=no_automatic_claim,
         provider_registry=provider_registry,
+        host_model_port=host_model_port or NativeExecutionValueHostModelBindingPort(
+            DESCRIPTOR.id,
+            DESCRIPTOR.native_provider_id,
+        ),
     )

package/runtime/python/okstra_ctl/adapters/hosts/codex/relay.md

@@ -77,9 +77,9 @@ Render every numbered item as its option label followed by its description verba
 | `read_artifacts` | Read the manifest-provided paths through the current host's file interface. |
 | `write_artifact` | Write only core-authorized `.okstra/` artifacts and preserve their schemas. |
 | `prompt_user` | Ask through the host text/question interface and stop at approval gates until an explicit answer arrives. |
-| `dispatch_worker` | Dispatch every `runner=native-session` assignment with the current Codex host's native worker/session primitive. Pass only `runner=cli-wrapper` assignments to `okstra codex-dispatch --project-root <root> --run-manifest <path> --workers <ids>`; use `--dry-run` first when the core requires a dispatch preview. **Not in a cmux run:** when the run manifest's `terminalBackend` is `cmux-pane`, `prompts/lead/adapters/cmux.md` overrides this row — start every worker with `okstra team dispatch`, this host's native path included, so okstra owns the panes and the user can watch the work. |
+| `dispatch_worker` | Verify each materialized invocation first. Dispatch `runner=native-session` with the current Codex host's primitive, the returned `promptPath`, and `hostModelValue`. Pass `runner=cli-wrapper` assignments to `okstra worker-dispatch --project-root <root> --run-manifest <path> --workers <ids>`; use `--dry-run` first when required. **Not in a cmux run:** when `terminalBackend` is `cmux-pane`, the cmux adapter overrides this row. |
 | `await_workers` | Await native host workers through the host primitive and CLI workers through synchronous dispatch, then verify team-state terminal records and Result Paths for both. |
-| `redispatch_worker` | Start a fresh native worker or `okstra codex-dispatch` attempt according to the persisted assignment's `runner`, and record the retry/reverify dispatch kind. |
+| `redispatch_worker` | Materialize and verify a fresh invocation, then start a fresh native worker or `okstra worker-dispatch` attempt according to the persisted runner. |
 | `shutdown_workers` | Perform process cleanup when a wrapper remains live; otherwise this operation is a no-op recorded in state. |
 | `record_lead_event` | Append the required structured event to the manifest-provided `leadEventsPath`; emit the matching user-facing `PROGRESS:` line. |
 | `collect_usage` | Collect artifact/rollout-backed usage through the existing Okstra token-usage path; never read Claude session JSONL as a substitute. |
@@ -91,6 +91,7 @@ Render every numbered item as its option label followed by its description verba
 - The prepared run manifest and team-state are the dispatch authority. A `runner=native-session` assignment stays in the current Codex host; a `runner=cli-wrapper` assignment uses the registered provider wrapper. Unsupported explicitly requested workers fail; an adapter must not silently change the roster.
 - The report-writer follows its persisted provider, model, and runner assignment exactly. It has no Codex-only provider override or separate opt-in gate.
 - Reverify and critic retries invoke a fresh worker attempt and persist the core-supplied `dispatchKind` (`reverify-r<N>` or `critic`) in the dispatch record; never reuse a prior rollout as a new vote.
+- Native calls use only `hostModelValue`. Immediately before the host primitive, run `okstra agent-prompt record-dispatch` with the project root, run manifest, verified metadata path, and `--enforcement-mode host-native-spec-link-gate`; after the Result Path exists, run `okstra agent-prompt link-result` with `--dispatch-id <invocationId>:attempt-1` and that path before accepting it. CLI calls use only `modelExecutionValue` through `worker-dispatch`, which records its own dispatch. The native linkage proves association with a verified specification, not observed prompt delivery.
 - Report-writer completion requires both the data.json Result Path and the worker-results audit path, even when the synchronous dispatch command exits successfully.
 
 ## Completion, cleanup, and resume

package/runtime/python/okstra_ctl/adapters/hosts/external/adapter.py

@@ -54,6 +54,7 @@ def create_adapter(
         "transcript or CLI usage artifact contract is registered."
     ),
     provider_registry: ProviderRegistry | None = None,
+    host_model_port=None,
 ) -> CapabilityHostAdapter:
     return CapabilityHostAdapter(
         DESCRIPTOR,
@@ -69,4 +70,5 @@ def create_adapter(
         supported_functions=INTERACTION_FUNCTIONS,
         detector=_detect_tmux,
         provider_registry=provider_registry,
+        host_model_port=host_model_port,
     )

package/runtime/python/okstra_ctl/adapters/hosts/external/relay.md

@@ -77,7 +77,7 @@ Render every numbered item as its option label followed by its description verba
 | `read_artifacts` | Read the manifest-provided paths through the current host's file or shell interface. |
 | `write_artifact` | Write only core-authorized `.okstra/` artifacts and preserve their schemas. |
 | `prompt_user` | Ask through the host text/question interface and require an explicit approval or clarification response. |
-| `dispatch_worker` | Run `okstra team dispatch --project-root <root> --run-manifest <path>`; use `--dry-run` first when the core requires a dispatch preview. **Not in a cmux run:** when the run manifest's `terminalBackend` is `cmux-pane`, `prompts/lead/adapters/cmux.md` overrides this row — start every worker with `okstra team dispatch`, this host's native path included, so okstra owns the panes and the user can watch the work. |
+| `dispatch_worker` | Verify each materialized invocation, then run deterministic `okstra worker-dispatch --project-root <root> --run-manifest <path>` for CLI assignments. Use `okstra team dispatch` only when the selected pane backend owns visible panes. |
 | `await_workers` | Run `okstra team await --project-root <root> --run-manifest <path>` through the host's asynchronous shell facility. |
 | `redispatch_worker` | Create the core-specified fresh jobs file and dispatch it with a new `dispatchKind`; never reuse a live worker conversation. |
 | `shutdown_workers` | Run `okstra team teardown --project-root <root> --run-manifest <path>` only after the user-approved cleanup gate. |
@@ -87,11 +87,11 @@ Render every numbered item as its option label followed by its description verba
 ## External dispatch details
 
 - For convergence reverify, consume the persisted round plan exactly. This adapter may map and transport each returned batch, but it cannot change batch membership and does not classify findings or branch on task type, provider, or model identity.
-- Do not invoke Claude Code team tools or `okstra codex-dispatch`.
+- Do not invoke Claude Code team tools or provider-specific LLM transport agents. `okstra codex-dispatch` is a compatibility alias only; use `okstra worker-dispatch`.
 - Worker completion is valid only from `workerDispatches[]`, terminal status sidecars, and required Result Paths. Pane creation alone is not completion.
 - Reverify uses a fresh jobs file at `runs/<task-type>/state/reverify-jobs-r<N>-<task-type>-<seq>.json`, sets `dispatchKind: "reverify-r<N>"`, and dispatches with `okstra team dispatch --project-root <root> --run-manifest <path> --dispatch-kind reverify-r<N> --jobs-file <jobs-file>`.
 - Report-writer uses a fresh one-job jobs file with `dispatchKind: "report-writer"` and the same schema, then dispatches through `okstra team dispatch --project-root <root> --run-manifest <path> --jobs-file <jobs-file>`.
-- Every reverify or report-writer jobs file carries `workerId`, `provider`, `role`, `modelExecutionValue`, `promptPath`, `resultPath`, `workerResultPath`, and `completionPaths`. For reverify, set `role` to `worker-reverify-r<N>` — the role selects the dispatch's idle budget and is recorded in the run's status sidecar, so it must name the actual assignment. The report-writer completion paths include both data.json and the worker-results audit file.
+- Every reverify or report-writer jobs file carries `workerId`, `provider`, `role`, `modelExecutionValue`, `promptPath`, `promptMetadataPath`, `invocationId`, `assignmentRef`, `audience`, the five prompt digests, `resultPath`, `workerResultPath`, and `completionPaths`. `worker-dispatch` verifies these fields before launching the provider process. For reverify, set `role` to `worker-reverify-r<N>`. The report-writer completion paths include both data.json and the worker-results audit file.
 - After either dispatch, run `okstra team await --project-root <root> --run-manifest <path>` before evaluating terminal status or completion paths.
 
 ## Completion, cleanup, and resume

package/runtime/python/okstra_ctl/adapters/hosts/grok/adapter.py

@@ -14,6 +14,7 @@ from okstra_ctl.adapters.hosts.capability_adapter import (
     numbered_interaction_port,
 )
 from okstra_ctl.domain.host import HostDescriptor
+from okstra_ctl.ports.host_model import NativeExecutionValueHostModelBindingPort
 from okstra_ctl.registry.provider_registry import ProviderRegistry
 
 
@@ -45,6 +46,7 @@ def create_adapter(
         "transcript or CLI usage artifact contract is registered."
     ),
     provider_registry: ProviderRegistry | None = None,
+    host_model_port=None,
 ) -> CapabilityHostAdapter:
     return CapabilityHostAdapter(
         DESCRIPTOR,
@@ -60,4 +62,8 @@ def create_adapter(
         supported_functions=INTERACTION_FUNCTIONS,
         detector=no_automatic_claim,
         provider_registry=provider_registry,
+        host_model_port=host_model_port or NativeExecutionValueHostModelBindingPort(
+            DESCRIPTOR.id,
+            DESCRIPTOR.native_provider_id,
+        ),
     )

package/runtime/python/okstra_ctl/adapters/hosts/grok/relay.md

@@ -76,7 +76,7 @@ Render every numbered item as its option label followed by its description verba
 | `read_artifacts` | Read the manifest-provided paths through the current Grok host file interface. |
 | `write_artifact` | Write only core-authorized `.okstra/` artifacts and preserve their schemas. |
 | `prompt_user` | Ask through the current host text interface and wait for an explicit answer. |
-| `dispatch_worker` | Follow each persisted assignment's `runner` and use the common host dispatch boundary. **Not in a cmux run:** when the run manifest's `terminalBackend` is `cmux-pane`, `prompts/lead/adapters/cmux.md` overrides this row — start every worker with `okstra team dispatch`, this host's native path included, so okstra owns the panes and the user can watch the work. |
+| `dispatch_worker` | Verify the materialized invocation. Use the host primitive with `promptPath` and `hostModelValue` for `native-session`; use deterministic `okstra worker-dispatch` with `modelExecutionValue` for `cli-wrapper`. **Not in a cmux run:** the cmux adapter overrides this row. |
 | `await_workers` | Await through the selected common dispatch backend, then verify terminal state and Result Paths. |
 | `redispatch_worker` | Start a fresh attempt from the persisted assignment and record the supplied dispatch kind. |
 | `shutdown_workers` | Clean up only host or process resources owned by this run. |
@@ -87,4 +87,5 @@ Render every numbered item as its option label followed by its description verba
 
 - Do not infer the current host from an installed `grok` executable. The runtime must come from an explicit request or current-session declaration.
 - Keep persisted provider, model, runner, and dispatch-kind assignments unchanged.
+- Before a native call, run `okstra agent-prompt record-dispatch` with the project root, run manifest, verified metadata path, and `--enforcement-mode host-native-spec-link-gate`; after the Result Path exists, run `okstra agent-prompt link-result` with `--dispatch-id <invocationId>:attempt-1` and that path before accepting it. This is a verified specification link, not proof of delivered prompt bytes.
 - Resume with the persisted Grok session ID when one exists; otherwise resume from Okstra run artifacts.

package/runtime/python/okstra_ctl/adapters/hosts/kimi/adapter.py

@@ -14,6 +14,7 @@ from okstra_ctl.adapters.hosts.capability_adapter import (
     numbered_interaction_port,
 )
 from okstra_ctl.domain.host import HostDescriptor
+from okstra_ctl.ports.host_model import NativeExecutionValueHostModelBindingPort
 from okstra_ctl.registry.provider_registry import ProviderRegistry
 
 
@@ -45,6 +46,7 @@ def create_adapter(
         "transcript or CLI usage artifact contract is registered."
     ),
     provider_registry: ProviderRegistry | None = None,
+    host_model_port=None,
 ) -> CapabilityHostAdapter:
     return CapabilityHostAdapter(
         DESCRIPTOR,
@@ -60,4 +62,8 @@ def create_adapter(
         supported_functions=INTERACTION_FUNCTIONS,
         detector=no_automatic_claim,
         provider_registry=provider_registry,
+        host_model_port=host_model_port or NativeExecutionValueHostModelBindingPort(
+            DESCRIPTOR.id,
+            DESCRIPTOR.native_provider_id,
+        ),
     )

package/runtime/python/okstra_ctl/adapters/hosts/kimi/relay.md

@@ -76,7 +76,7 @@ Render every numbered item as its option label followed by its description verba
 | `read_artifacts` | Read the manifest-provided paths through the current Kimi host file interface. |
 | `write_artifact` | Write only core-authorized `.okstra/` artifacts and preserve their schemas. |
 | `prompt_user` | Ask through the current host text interface and wait for an explicit answer. |
-| `dispatch_worker` | Follow each persisted assignment's `runner` and use the common host dispatch boundary. **Not in a cmux run:** when the run manifest's `terminalBackend` is `cmux-pane`, `prompts/lead/adapters/cmux.md` overrides this row — start every worker with `okstra team dispatch`, this host's native path included, so okstra owns the panes and the user can watch the work. |
+| `dispatch_worker` | Verify the materialized invocation. Use the host primitive with `promptPath` and `hostModelValue` for `native-session`; use deterministic `okstra worker-dispatch` with `modelExecutionValue` for `cli-wrapper`. **Not in a cmux run:** the cmux adapter overrides this row. |
 | `await_workers` | Await through the selected common dispatch backend, then verify terminal state and Result Paths. |
 | `redispatch_worker` | Start a fresh attempt from the persisted assignment and record the supplied dispatch kind. |
 | `shutdown_workers` | Clean up only host or process resources owned by this run. |
@@ -87,4 +87,5 @@ Render every numbered item as its option label followed by its description verba
 
 - Do not infer the current host from an installed `kimi` executable. The runtime must come from an explicit request or current-session declaration.
 - Keep persisted provider, model, runner, and dispatch-kind assignments unchanged.
+- Before a native call, run `okstra agent-prompt record-dispatch` with the project root, run manifest, verified metadata path, and `--enforcement-mode host-native-spec-link-gate`; after the Result Path exists, run `okstra agent-prompt link-result` with `--dispatch-id <invocationId>:attempt-1` and that path before accepting it. This is a verified specification link, not proof of delivered prompt bytes.
 - Resume with the persisted Kimi session ID when one exists; otherwise resume from Okstra run artifacts.