okstra 0.72.0 → 0.74.0

package/runtime/templates/reports/final-report.template.md

@@ -2,7 +2,12 @@
    Consumed by scripts/okstra-render-final-report.py against the JSON
    SSOT at runs/<task-type>/reports/final-report-<task-type>-<seq>.data.json.
    Custom filters: format_int, format_usd, format_duration_ms,
-   yaml_scalar, yaml_inline_list (defined in render_final_report.py).
+   yaml_scalar, yaml_inline_list, model_detail, mdcell (defined in
+   render_final_report.py). Every data interpolation inside a table row
+   carries `| mdcell` so a literal `|` in worker prose (e.g. "PASS|FAIL")
+   cannot split the row — except t() labels and format_int/format_usd/
+   format_duration_ms outputs, which cannot contain `|` by construction.
+   Never apply mdcell outside table cells (code fences, headings, prose).
    Token Usage cells render as `--` while tokenUsage.*.totalTokens is
    null in Phase 6; Phase 7 mutates the data.json then re-renders. #}
 ---
@@ -47,7 +52,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | {{ t("columns.summary") }} |
 |--------|------------|
 {% for row in summary -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}`<br>{{ t("columns.source") }}: {{ row.source }} | {{ row.summary }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}`<br>{{ t("columns.source") }}: {{ row.source | mdcell }} | {{ row.summary | mdcell }} |
 {% endfor %}
 
 ## Verdict Card
@@ -56,11 +61,11 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 
 | {{ t("verdictCard.tableHeaderLabel") }} | {{ t("verdictCard.tableHeaderValue") }} |
 |------|----|
-| Final Conclusion | {{ verdictCard.finalConclusion }} |
-| Verdict Token | `{{ verdictCard.verdictToken }}` |
-| Direction | `{{ verdictCard.direction }}` |
+| Final Conclusion | {{ verdictCard.finalConclusion | mdcell }} |
+| Verdict Token | `{{ verdictCard.verdictToken | mdcell }}` |
+| Direction | `{{ verdictCard.direction | mdcell }}` |
 | Approval Required? | `{% if verdictCard.approvalRequired %}yes — {{ t("verdictCard.approvalRequiredSuffix") }}{% else %}no{% endif %}` |
-| Next Step | {{ verdictCard.nextStep }} |
+| Next Step | {{ verdictCard.nextStep | mdcell }} |
 
 ## 1. Clarification Items
 
@@ -77,7 +82,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Statement | Expected form | User input |
 |---|---|---|---|
 {% for row in clarificationItems -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}`<br>Kind: `{{ row.kind }}`<br>Blocks: `{{ row.blocks }}`<br>Status: {{ row.status }} | {{ row.statement }} | {{ row.expectedForm }} | {{ row.userInput or '' }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}`<br>Kind: `{{ row.kind | mdcell }}`<br>Blocks: `{{ row.blocks | mdcell }}`<br>Status: {{ row.status | mdcell }} | {{ row.statement | mdcell }} | {{ row.expectedForm | mdcell }} | {{ (row.userInput or '') | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -91,7 +96,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Evidence |
 |--------|----------|
 {% for row in evidence.primary -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}`<br>Source items: {{ row.sourceItems | join(', ') }}<br>Source: {{ row.source }} | {{ row.evidence }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}`<br>Source items: {{ row.sourceItems | join(', ') | mdcell }}<br>Source: {{ row.source | mdcell }} | {{ row.evidence | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -105,7 +110,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Hypothesis or supporting evidence | Source / confidence |
 |--------|-----------------------------------|---------------------|
 {% for row in evidence.secondary -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}` | {{ row.hypothesis }} | {{ row.confidence }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}` | {{ row.hypothesis | mdcell }} | {{ row.confidence | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -134,7 +139,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Title | Scope (files/areas) | Reason / Why deferred |
 |--------|-------|---------------------|------------------------|
 {% for row in followUpTasks -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}`<br>Origin: `{{ row.origin }}`<br>New Task ID: `{{ row.newTaskId }}`<br>Type: `{{ row.suggestedTaskType }}`<br>Priority: `{{ row.priority }}`<br>Auto-spawn: `{{ row.autoSpawn }}` | {{ row.title }} | {{ row.scope }} | {{ row.reason }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}`<br>Origin: `{{ row.origin | mdcell }}`<br>New Task ID: `{{ row.newTaskId | mdcell }}`<br>Type: `{{ row.suggestedTaskType | mdcell }}`<br>Priority: `{{ row.priority | mdcell }}`<br>Auto-spawn: `{{ row.autoSpawn | mdcell }}` | {{ row.title | mdcell }} | {{ row.scope | mdcell }} | {{ row.reason | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -146,7 +151,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Item | Risk if ignored | Mitigation Owner |
 |--------|------|-----------------|------------------|
 {% for row in missingInformation -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}` | {{ row.item }} | {{ row.risk }} | {{ row.owner }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}` | {{ row.item | mdcell }} | {{ row.risk | mdcell }} | {{ row.owner | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -163,7 +168,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
   | ID | Ticket ID | Action | Path (and line-range) | Change summary |
   |----|-----------|--------|------------------------|----------------|
 {% for fs in opt.fileStructure -%}
-  | {{ fs.id }} | `{{ fs.ticketId }}` | {{ fs.action }} | `{{ fs.path }}` | {{ fs.summary }} |
+  | {{ fs.id | mdcell }} | `{{ fs.ticketId | mdcell }}` | {{ fs.action | mdcell }} | `{{ fs.path | mdcell }}` | {{ fs.summary | mdcell }} |
 {% endfor %}
 
 - {{ t("implementationPlanning.optionInterfacesLabel") }}: {{ opt.interfaces }}
@@ -176,17 +181,17 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | Option | Complexity | Risk | Reversibility | Test Coverage Cost | Rollout Cost |
 |--------|-----------|------|---------------|--------------------|--------------|
 {% for row in implementationPlanning.tradeoffMatrix -%}
-| {{ row.option }} | {{ row.complexity }} | {{ row.risk }} | {{ row.reversibility }} | {{ row.testCoverageCost }} | {{ row.rolloutCost }} |
+| {{ row.option | mdcell }} | {{ row.complexity | mdcell }} | {{ row.risk | mdcell }} | {{ row.reversibility | mdcell }} | {{ row.testCoverageCost | mdcell }} | {{ row.rolloutCost | mdcell }} |
 {% endfor %}
 
 ### Recommended Option{% if t("sectionAside.recommendedOption") != "Recommended Option" %} ({{ t("sectionAside.recommendedOption") }}){% endif %}
 
 | {{ t("implementationPlanning.recommendedTableHeaderLabel") }} | {{ t("implementationPlanning.recommendedTableHeaderValue") }} |
 |------|----|
-| Recommended Option | {{ implementationPlanning.recommendedOption.name }} |
-| {{ t("implementationPlanning.coreReasonLabel") }} | {{ implementationPlanning.recommendedOption.coreReason }} |
-| {{ t("implementationPlanning.rationaleLabel") }} | {{ implementationPlanning.recommendedOption.rationale }} |
-| {{ t("implementationPlanning.rejectedSummaryLabel") }} | {{ implementationPlanning.recommendedOption.rejectedSummary }} |
+| Recommended Option | {{ implementationPlanning.recommendedOption.name | mdcell }} |
+| {{ t("implementationPlanning.coreReasonLabel") }} | {{ implementationPlanning.recommendedOption.coreReason | mdcell }} |
+| {{ t("implementationPlanning.rationaleLabel") }} | {{ implementationPlanning.recommendedOption.rationale | mdcell }} |
+| {{ t("implementationPlanning.rejectedSummaryLabel") }} | {{ implementationPlanning.recommendedOption.rejectedSummary | mdcell }} |
 
 ### Dependency / Migration Risk{% if t("sectionAside.dependencyRisk") != "Dependency / Migration Risk" %} ({{ t("sectionAside.dependencyRisk") }}){% endif %}
 
@@ -196,16 +201,16 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | Kind | Item | {{ t("implementationPlanning.columnImpact") }} | {{ t("implementationPlanning.columnMitigation") }} |
 |----|------|------|------|------------------|
 {% for row in implementationPlanning.dependencyMigrationRisk -%}
-| {{ row.id }} | {{ row.kind }} | {{ row.item }} | {{ row.impact }} | {{ row.mitigation }} |
+| {{ row.id | mdcell }} | {{ row.kind | mdcell }} | {{ row.item | mdcell }} | {{ row.impact | mdcell }} | {{ row.mitigation | mdcell }} |
 {% endfor %}
 {%- endif %}
 
 ### Validation Checklist{% if t("sectionAside.validationChecklist") != "Validation Checklist" %} ({{ t("sectionAside.validationChecklist") }}){% endif %}
 
-| Phase | Ticket ID | Check | Command / Observation | Expected outcome |
-|-------|-----------|-------|------------------------|-------------------|
+| ID | Phase | Ticket ID | Check | Command / Observation | Expected outcome |
+|----|-------|-----------|-------|------------------------|-------------------|
 {% for row in implementationPlanning.validationChecklist -%}
-| {{ row.phase }} | `{{ row.ticketId }}` | {{ row.check }} | `{{ row.commandOrObservation }}` | {{ row.expectedOutcome }} |
+| {{ row.id | mdcell }} | {{ row.phase | mdcell }} | `{{ row.ticketId | mdcell }}` | {{ row.check | mdcell }} | `{{ row.commandOrObservation | mdcell }}` | {{ row.expectedOutcome | mdcell }} |
 {% endfor %}
 
 ### Rollback Strategy{% if t("sectionAside.rollbackStrategy") != "Rollback Strategy" %} ({{ t("sectionAside.rollbackStrategy") }}){% endif %}
@@ -213,7 +218,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | Step | Action | Trigger signal | {{ t("columns.checkMethod") }} |
 |----|------|--------|----------------|-----------|
 {% for row in implementationPlanning.rollbackStrategy -%}
-| {{ row.id }} | {{ row.step }} | `{{ row.action }}` | {{ row.triggerSignal }} | `{{ row.verificationMethod }}` |
+| {{ row.id | mdcell }} | {{ row.step | mdcell }} | `{{ row.action | mdcell }}` | {{ row.triggerSignal | mdcell }} | `{{ row.verificationMethod | mdcell }}` |
 {% endfor %}
 
 ### Requirement Coverage
@@ -221,7 +226,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | Source | Requirement | Covered by option / stage / step | Status |
 |----|--------|-------------|-----------------------------------|--------|
 {% for row in implementationPlanning.requirementCoverage -%}
-| {{ row.id }} | `{{ row.source }}` | {{ row.requirement }} | {{ row.coveredBy }} | `{{ row.status }}` |
+| {{ row.id | mdcell }} | `{{ row.source | mdcell }}` | {{ row.requirement | mdcell }} | {{ row.coveredBy | mdcell }} | `{{ row.status | mdcell }}` |
 {% endfor %}
 
 ## 5.5 Stage Map
@@ -229,7 +234,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | stage | title | depends-on | step-count | exit-contract-summary |
 |-------|-------|------------|------------|-----------------------|
 {% for row in implementationPlanning.stageMap -%}
-| {{ row.stage }} | {{ row.title }} | {{ row.dependsOn }} | {{ row.stepCount }} | {{ row.exitContractSummary }} |
+| {{ row.stage | mdcell }} | {{ row.title | mdcell }} | {{ row.dependsOn | mdcell }} | {{ row.stepCount | mdcell }} | {{ row.exitContractSummary | mdcell }} |
 {% endfor %}
 
 {% for stage in implementationPlanning.stages %}
@@ -255,7 +260,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | step | action | files | command | expected |
 |------|--------|-------|---------|----------|
 {% for row in stage.stepwiseExecution -%}
-| {{ row.step }} | {{ row.action }} | `{{ row.files }}` | `{{ row.command }}` | {{ row.expected }} |
+| {{ row.step | mdcell }} | {{ row.action | mdcell }} | `{{ row.files | mdcell }}` | `{{ row.command | mdcell }}` | {{ row.expected | mdcell }} |
 {% endfor %}
 
 ### Stage Exit Contract
@@ -280,7 +285,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | Plan item | Worker | Verdict | Breakage kind | Note |
 |-----------|--------|---------|---------------|------|
 {% for row in implementationPlanning.planBodyVerification.verdictDetails -%}
-| {{ row.planItem }} | {{ row.worker }} | {{ row.verdict }} | {{ row.breakageKind or '--' }} | {{ row.note or '' }} |
+| {{ row.planItem | mdcell }} | {{ row.worker | mdcell }} | {{ row.verdict | mdcell }} | {{ (row.breakageKind or '--') | mdcell }} | {{ (row.note or '') | mdcell }} |
 {% endfor %}
 
 #### Dissent log
@@ -318,10 +323,10 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 
 | {{ t("releaseHandoff.questionsTableHeader.questionId") }} | {{ t("releaseHandoff.questionsTableHeader.questionBody") }} | {{ t("releaseHandoff.questionsTableHeader.userResponse") }} | {{ t("releaseHandoff.questionsTableHeader.allowedOptions") }} |
 |---------|-----------|--------------------|--------------------|
-| H1 | {{ t("releaseHandoff.h1Body") }} | `{{ releaseHandoff.userSelections.h1 }}` | `local only` / `push + PR` / `skip` |
-| H2 | {{ t("releaseHandoff.h2Body") }} | `{{ releaseHandoff.userSelections.h2 or t("releaseHandoff.h2DefaultLabel") }}` | {{ t("releaseHandoff.h2OptionsLabel") }} |
-| H2b | Merge conflict probe | `{{ releaseHandoff.userSelections.h2b or releaseHandoff.mergeConflictProbe.kind }}` | `not-run` / `clean` / `proceed anyway` / `change base branch` / `cancel` |
-| H3 | {{ t("releaseHandoff.h3Body") }} | `{{ releaseHandoff.userSelections.h3 }}` | `use as-is` / `edit then proceed` / `cancel` |
+| H1 | {{ t("releaseHandoff.h1Body") }} | `{{ releaseHandoff.userSelections.h1 | mdcell }}` | `local only` / `push + PR` / `skip` |
+| H2 | {{ t("releaseHandoff.h2Body") }} | `{{ (releaseHandoff.userSelections.h2 or t("releaseHandoff.h2DefaultLabel")) | mdcell }}` | {{ t("releaseHandoff.h2OptionsLabel") }} |
+| H2b | Merge conflict probe | `{{ (releaseHandoff.userSelections.h2b or releaseHandoff.mergeConflictProbe.kind) | mdcell }}` | `not-run` / `clean` / `proceed anyway` / `change base branch` / `cancel` |
+| H3 | {{ t("releaseHandoff.h3Body") }} | `{{ releaseHandoff.userSelections.h3 | mdcell }}` | `use as-is` / `edit then proceed` / `cancel` |
 
 ### 5.6.4 Executed Commands
 
@@ -331,7 +336,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | # | command (verbatim) | exit code | {{ t("releaseHandoff.commandsTableHeader.outputSummary") }} |
 |---|---------------------|-----------|--------------------|
 {% for row in releaseHandoff.executedCommands -%}
-| {{ row.number }} | `{{ row.command }}` | `{{ row.exitCode }}` | {{ row.outputSummary }} |
+| {{ row.number | mdcell }} | `{{ row.command | mdcell }}` | `{{ row.exitCode | mdcell }}` | {{ row.outputSummary | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -343,7 +348,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | Short SHA | Full SHA | Subject | Files |
 |-----------|----------|---------|-------|
 {% for row in releaseHandoff.commitList -%}
-| `{{ row.shortSha }}` | `{{ row.fullSha }}` | {{ row.subject }} | {{ row.files }} |
+| `{{ row.shortSha | mdcell }}` | `{{ row.fullSha | mdcell }}` | {{ row.subject | mdcell }} | {{ row.files | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -393,7 +398,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | # | Short SHA | Full SHA | Plan Step | Subject | Files |
 |---|-----------|----------|-----------|---------|-------|
 {% for row in implementation.commitList -%}
-| {{ row.number }} | `{{ row.shortSha }}` | `{{ row.fullSha }}` | {{ row.planStep }} | {{ row.subject }} | {{ row.files }} |
+| {{ row.number | mdcell }} | `{{ row.shortSha | mdcell }}` | `{{ row.fullSha | mdcell }}` | {{ row.planStep | mdcell }} | {{ row.subject | mdcell }} | {{ row.files | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -406,7 +411,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | File | Action | Lines (+/-) | Plan step / Out-of-plan |
 |------|--------|-------------|--------------------------|
 {% for row in implementation.diffSummary.files -%}
-| `{{ row.file }}` | {{ row.action }} | `{{ row.lines }}` | {{ row.planStep }} |
+| `{{ row.file | mdcell }}` | {{ row.action | mdcell }} | `{{ row.lines | mdcell }}` | {{ row.planStep | mdcell }} |
 {% endfor %}
 
 ### 5.7.4 Out-of-plan Edits
@@ -417,7 +422,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | File | Rationale | Trigger |
 |----|------|-----------|---------|
 {% for row in implementation.outOfPlanEdits -%}
-| {{ row.id }} | `{{ row.file }}` | {{ row.rationale }} | {{ row.trigger }} |
+| {{ row.id | mdcell }} | `{{ row.file | mdcell }}` | {{ row.rationale | mdcell }} | {{ row.trigger | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -438,7 +443,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | Phase | Command | Exit code | Output tail | TDD evidence |
 |-------|---------|-----------|-------------|--------------|
 {% for row in implementation.validationEvidence -%}
-| {{ row.phase }} | `{{ row.command }}` | `{{ row.exitCode }}` | {{ row.outputTail }} | {{ row.tddEvidence or '--' }} |
+| {{ row.phase | mdcell }} | `{{ row.command | mdcell }}` | `{{ row.exitCode | mdcell }}` | {{ row.outputTail | mdcell }} | {{ (row.tddEvidence or '--') | mdcell }} |
 {% endfor %}
 
 ### 5.7.7 Verifier Results
@@ -457,7 +462,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | Category | Rollback command | Verification | Result |
 |----------|-------------------|---------------|--------|
 {% for row in implementation.rollbackVerification -%}
-| {{ row.category }} | `{{ row.rollbackCommand }}` | {{ row.verification }} | `{{ row.result }}` |
+| {{ row.category | mdcell }} | `{{ row.rollbackCommand | mdcell }}` | {{ row.verification | mdcell }} | `{{ row.result | mdcell }}` |
 {% endfor %}
 
 ### 5.7.9 Routing Recommendation
@@ -499,7 +504,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | Severity | Statement | Evidence | Recommended follow-up phase |
 |----|----------|-----------|----------|------------------------------|
 {% for row in finalVerification.acceptanceBlockers -%}
-| {{ row.id }} | `{{ row.severity }}` | {{ row.statement }} | {{ row.evidence }} | `{{ row.followUpPhase }}` |
+| {{ row.id | mdcell }} | `{{ row.severity | mdcell }}` | {{ row.statement | mdcell }} | {{ row.evidence | mdcell }} | `{{ row.followUpPhase | mdcell }}` |
 {% endfor %}
 {%- endif %}
 
@@ -511,7 +516,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | Item | Mitigation owner | Escalation trigger |
 |----|------|------------------|---------------------|
 {% for row in finalVerification.residualRisk -%}
-| {{ row.id }} | {{ row.item }} | {{ row.owner }} | {{ row.escalationTrigger }} |
+| {{ row.id | mdcell }} | {{ row.item | mdcell }} | {{ row.owner | mdcell }} | {{ row.escalationTrigger | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -520,7 +525,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | {{ t("finalVerification.columnRequirement") }} | Artifact | Status |
 |----|--------------------------------|----------|--------|
 {% for row in finalVerification.validationEvidence -%}
-| {{ row.id }} | {{ row.requirement }} | `{{ row.artifact }}` | {{ row.status }} |
+| {{ row.id | mdcell }} | {{ row.requirement | mdcell }} | `{{ row.artifact | mdcell }}` | {{ row.status | mdcell }} |
 {% endfor %}
 
 ### 5.8.5 Read-only Command Log
@@ -528,7 +533,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | # | Tier | Command (verbatim) | Status | Exit code | Output tail |
 |---|------|---------------------|--------|-----------|-------------|
 {% for row in finalVerification.readonlyCommandLog -%}
-| {{ row.number }} | {{ row.tier }} | `{{ row.command }}` | `{{ row.status }}` | {{ row.exitCode if row.exitCode is not none else '—' }} | {{ row.rejectionReason if row.status == 'rejected' else row.outputTail }} |
+| {{ row.number | mdcell }} | {{ row.tier | mdcell }} | `{{ row.command | mdcell }}` | `{{ row.status | mdcell }}` | {{ (row.exitCode if row.exitCode is not none else '—') | mdcell }} | {{ (row.rejectionReason if row.status == 'rejected' else row.outputTail) | mdcell }} |
 {% endfor %}
 
 ### 5.8.6 Conditional Acceptance Conditions
@@ -539,7 +544,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | ID | Condition | Evidence required | Blocks release-handoff |
 |----|-----------|-------------------|------------------------|
 {% for row in finalVerdict.conditionalAcceptanceConditions -%}
-| {{ row.id }} | {{ row.condition }} | {{ row.evidenceRequired }} | {{ row.blocksReleaseHandoff }} |
+| {{ row.id | mdcell }} | {{ row.condition | mdcell }} | {{ row.evidenceRequired | mdcell }} | {{ row.blocksReleaseHandoff | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -580,7 +585,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | Round | inputQueueSize | resolvedCount | carriedForwardCount | dispatches (worker:status:durationMs) | skippedWorkers (worker:reason) |
 |-------|----------------|---------------|----------------------|----------------------------------------|---------------------------------|
 {% for row in crossVerification.roundHistory.rounds -%}
-| {{ row.round }} | {{ row.inputQueueSize }} | {{ row.resolvedCount }} | {{ row.carriedForwardCount }} | {{ row.dispatches }} | {{ row.skippedWorkers }} |
+| {{ row.round | mdcell }} | {{ row.inputQueueSize | mdcell }} | {{ row.resolvedCount | mdcell }} | {{ row.carriedForwardCount | mdcell }} | {{ row.dispatches | mdcell }} | {{ row.skippedWorkers | mdcell }} |
 {% endfor %}
 
 - `round2SkippedReason`: `{{ crossVerification.roundHistory.round2SkippedReason }}`  ← {{ t("roundHistory.round2SkippedReasonNote") }}
@@ -600,7 +605,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Statement | Evidence (path:line / log / worker report) |
 |--------|-----------|---------------------------------------------|
 {% for row in crossVerification.consensus -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}`<br>Source items: {{ row.sourceItems | join(', ') }} | {{ row.statement }} | {{ row.evidence }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}`<br>Source items: {{ row.sourceItems | join(', ') | mdcell }} | {{ row.statement | mdcell }} | {{ row.evidence | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -614,7 +619,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Disagreement | Evidence |
 |--------|--------------|----------|
 {% for row in crossVerification.differences -%}
-| **{{ row.id }}**<br>Ticket: `{{ row.ticketId }}`<br>Workers: {% for w in row.workersPosition %}{{ w.worker }}:{{ w.itemId }} ({{ w.position }}){% if not loop.last %} / {% endif %}{% endfor %} | {{ row.disagreement }} | {{ row.evidence }} |
+| **{{ row.id | mdcell }}**<br>Ticket: `{{ row.ticketId | mdcell }}`<br>Workers: {% for w in row.workersPosition %}{{ w.worker | mdcell }}:{{ w.itemId | mdcell }} ({{ w.position | mdcell }}){% if not loop.last %} / {% endif %}{% endfor %} | {{ row.disagreement | mdcell }} | {{ row.evidence | mdcell }} |
 {% endfor %}
 {%- endif %}
 
@@ -624,11 +629,11 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 
 | {{ t("verdictCard.tableHeaderLabel") }} | {{ t("verdictCard.tableHeaderValue") }} |
 |------|----|
-| Final Conclusion | {{ finalVerdict.finalConclusion }} |
-| Verdict Token | `{{ finalVerdict.verdictToken }}` |
-| Direction | `{{ finalVerdict.direction }}` |
-| {{ t("verdictCard.rationaleLabel") }} | {{ finalVerdict.rationaleRowIds | join(', ') }} |
-| {{ t("verdictCard.nextStepLabel") }} | {{ finalVerdict.nextStep }} |
+| Final Conclusion | {{ finalVerdict.finalConclusion | mdcell }} |
+| Verdict Token | `{{ finalVerdict.verdictToken | mdcell }}` |
+| Direction | `{{ finalVerdict.direction | mdcell }}` |
+| {{ t("verdictCard.rationaleLabel") }} | {{ finalVerdict.rationaleRowIds | join(', ') | mdcell }} |
+| {{ t("verdictCard.nextStepLabel") }} | {{ finalVerdict.nextStep | mdcell }} |
 
 {% if ticketCoverage.omit %}
 {# Ticket Coverage omitted entirely — release-handoff / final-verification #}
@@ -643,7 +648,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | Ticket ID | {{ t("ticketCoverage.columnSections") }} | {{ t("ticketCoverage.columnRelatedIds") }} |
 |-----------|-----------|---------------|
 {% for row in ticketCoverage.rows -%}
-| `{{ row.ticketId }}` | `{{ row.sections }}` | `{{ row.relatedIds }}` |
+| `{{ row.ticketId | mdcell }}` | `{{ row.sections | mdcell }}` | `{{ row.relatedIds | mdcell }}` |
 {% endfor %}
 {%- endif %}
 
@@ -655,7 +660,7 @@ implementation-option: {{ frontmatter.implementationOption | yaml_scalar }}
 | {{ t("columns.recordMeta") }} | Summary of Key Findings |
 |--------|-------------------------|
 {% for row in executionStatus -%}
-| **{{ row.agent }}**<br>Role: {{ row.role }}<br>Model: {{ row.model }}<br>Status: {{ row.status }}<br>{{ t("columns.rawTokens") }}: {{ row.totalTokens | format_int }}{% if row.cliTotalTokens %} (CLI: {{ row.cliTotalTokens | format_int }}){% endif %}<br>{{ t("columns.billableTokens") }}: {{ row.billableTokens | format_int }}<br>{{ t("columns.cost") }}: {{ row.costUsd | format_usd }}{% if row.cliCostUsd %} (+ CLI {{ row.cliCostUsd | format_usd }}){% endif %}<br>Duration: {{ row.durationMs | format_duration_ms }} | {{ row.summary }} |
+| **{{ row.agent | mdcell }}**<br>Role: {{ row.role | mdcell }}<br>Model: {{ row.model | mdcell }}<br>Status: {{ row.status | mdcell }}<br>{{ t("columns.rawTokens") }}: {{ row.totalTokens | format_int }}{% if row.cliTotalTokens %} (CLI: {{ row.cliTotalTokens | format_int }}){% endif %}<br>{{ t("columns.billableTokens") }}: {{ row.billableTokens | format_int }}<br>{{ t("columns.cost") }}: {{ row.costUsd | format_usd }}{% if row.cliCostUsd %} (+ CLI {{ row.cliCostUsd | format_usd }}){% endif %}<br>Duration: {{ row.durationMs | format_duration_ms }} | {{ row.summary | mdcell }} |
 {% endfor %}
 
 ## {{ t("tokenSummary.heading") }}

package/runtime/templates/reports/report.css

@@ -121,13 +121,14 @@ th, td {
   /* No max-width: cells that carry prose (statement / source / scope)
    * absorb the remaining horizontal space within `main`'s 120ch. */
 }
-/* Narrow columns — header AND every body cell of this column fit
- * within 30 plain chars (per `_narrow_columns()` in report_views.py).
- * Examples: ID, Ticket ID, Kind, Status, Priority, Auto-spawn?,
- * 에이전트, 역할, 모델, 상태. Pinning `width: 5%` makes these
- * columns shrink toward the suggestion while wide neighbours absorb
- * the remainder, so a long-prose row never squashes ID-style stacks
- * into one-character ladders. */
+/* Narrow columns — assigned by `_narrow_columns()` in report_views.py:
+ * either every cell fits within 30 plain chars, or the header is
+ * whitelisted (ID, Ticket ID, Kind, Status, 항목, 출처, 에이전트 …)
+ * AND no cell carries a <br>-line over 60 plain chars — `nowrap` below
+ * makes the longest line the column's intrinsic width, so longer lines
+ * must fall back to a plain wrapping column. Pinning `width: 5%` makes
+ * narrow columns shrink toward the suggestion while wide neighbours
+ * absorb the remainder. */
 td.td-narrow, th.td-narrow {
   width: 5%;
   white-space: nowrap;
@@ -196,9 +197,22 @@ button[data-action]:hover { background: color-mix(in srgb, Highlight 20%, Button
 }
 #user-response-output:empty { display: none; }
 
+#plan-approval {
+  max-width: 120ch;
+  margin: 1.5rem auto;
+  padding: 0.8em 1rem;
+  border: 1px solid color-mix(in srgb, GrayText 40%, transparent);
+  border-radius: 4px;
+}
+#plan-approval h2 { margin-top: 0; }
+#plan-approval label { display: block; margin: 0.4em 0; }
+#plan-approval select { font: inherit; max-width: 100%; }
+.approval-disabled-reason { color: GrayText; margin: 0.4em 0 0; }
+
 @media print {
   .report-header, .report-footer { position: static; }
   thead th { position: static; }
   button[data-action] { display: none; }
   #user-response-output { display: none; }
+  #plan-approval { display: none; }
 }

package/runtime/templates/reports/report.js

@@ -9,8 +9,11 @@
  *      (everything else / fallback).
  *   2. Serialise the entries into markdown whose bytes are IDENTICAL
  *      to scripts/okstra_ctl/report_views.py serialize_user_response.
- *   3. Write the result to <pre id="user-response-output"> and offer a
- *      [Copy] button.
+ *   3. Write the result to <pre id="user-response-output">, offer a
+ *      [Copy] button, and download it as
+ *      user-response-<task-type>-<seq>.md — the user drops that file in
+ *      runs/<task-type>/user-responses/ and --resume-clarification
+ *      auto-appends it to the next run's clarification-response.md.
  *
  * The byte-identity contract is enforced by tests/test_report_views.py
  * which spawns Node to execute buildUserResponseMarkdown and diffs the
@@ -91,6 +94,23 @@
     return entries;
   }
 
+  // Plan Approval 위젯 (implementation-planning 보고서에만 존재). 체크박스가
+  // disabled(§1 차단 미해소)이거나 미체크면 null. 옵션이 추천(data-recommended)
+  // 그대로면 implementationOption 을 비워 보낸다 → 소비 측 Recommended 폴백.
+  function collectApproval() {
+    var box = document.getElementById("approval-checkbox");
+    if (!box || box.disabled || !box.checked) return null;
+    var sel = document.getElementById("approval-option");
+    var option = "";
+    if (sel && sel.selectedIndex >= 0) {
+      var opt = sel.options[sel.selectedIndex];
+      if (opt && opt.getAttribute("data-recommended") !== "true") {
+        option = opt.value;
+      }
+    }
+    return { approved: true, implementationOption: option };
+  }
+
   // Toggle the visibility of the "기타" companion input next to each
   // select whose current value is "__other__". Wired at bind() time and
   // also called once for the initial state.
@@ -110,7 +130,7 @@
     }
   }
 
-  function buildUserResponseMarkdown(runMeta, entries, createdAt) {
+  function buildUserResponseMarkdown(runMeta, entries, createdAt, approval) {
     var head =
       "---\n" +
       "task-key: " + (runMeta["task-key"] || "") + "\n" +
@@ -123,10 +143,8 @@
       "\n" +
       "# User Response\n";
 
-    if (!entries || entries.length === 0) {
-      return head + "\n_(No user responses recorded.)_\n";
-    }
-
+    entries = entries || [];
+    var hasApproval = !!(approval && approval.approved);
     var chunks = "";
     for (var i = 0; i < entries.length; i++) {
       var e = entries[i];
@@ -140,15 +158,44 @@
       }
       chunks += chunk;
     }
+    if (entries.length === 0 && !hasApproval) {
+      chunks += "\n_(No user responses recorded.)_\n";
+    }
+    if (hasApproval) {
+      chunks += "\n## APPROVAL\n- Approved: true\n";
+      if (approval.implementationOption) {
+        chunks +=
+          "- Implementation-Option: " + trimMultiline(approval.implementationOption) + "\n";
+      }
+    }
     return head + chunks;
   }
 
+  function downloadUserResponse(md, runMeta) {
+    var name =
+      "user-response-" + (runMeta["task-type"] || "report") + "-" +
+      (runMeta["seq"] || "000") + ".md";
+    var blob = new Blob([md], { type: "text/markdown" });
+    var url = URL.createObjectURL(blob);
+    var a = document.createElement("a");
+    a.href = url;
+    a.download = name;
+    document.body.appendChild(a);
+    a.click();
+    document.body.removeChild(a);
+    setTimeout(function () { URL.revokeObjectURL(url); }, 0);
+  }
+
   function exportUserResponse() {
     var runMeta = readRunMeta();
     var entries = collectEntries();
-    var md = buildUserResponseMarkdown(runMeta, entries, isoNowUtc());
+    var approval = collectApproval();
+    var md = buildUserResponseMarkdown(runMeta, entries, isoNowUtc(), approval);
     var out = document.getElementById("user-response-output");
     if (out) out.textContent = md;
+    // Nothing answered yet — show the empty serialisation as feedback but
+    // don't download a useless file.
+    if (entries.length > 0 || approval) downloadUserResponse(md, runMeta);
     return md;
   }
 
@@ -200,6 +247,7 @@
     window.okstraReportView = {
       buildUserResponseMarkdown: buildUserResponseMarkdown,
       collectEntries: collectEntries,
+      collectApproval: collectApproval,
       exportUserResponse: exportUserResponse,
     };
   }

package/runtime/templates/reports/user-response.template.md

@@ -62,6 +62,21 @@ created-at: 2026-05-17T10:00:00Z
   > (prediction=0: 1,204) (prediction=1: 38)
 ```
 
+## APPROVAL 블록 (implementation-planning 전용)
+
+Plan Approval 위젯에서 승인을 체크하고 Export 하면 본문 끝에 다음 블록이 추가됩니다:
+
+```markdown
+## APPROVAL
+- Approved: true
+- Implementation-Option: <Option Candidates 의 name 그대로>
+```
+
+- 옵션을 추천(권장) 그대로 두면 `Implementation-Option:` 라인은 생략됩니다 — implementation 은 plan 의 Recommended Option 으로 폴백합니다.
+- 이 블록의 소비자는 implementation 시작 마법사의 approve-confirm 단계입니다 (`scripts/okstra_ctl/wizard.py`). 마법사가 사용자 확인 후 기존 `--approve` / `--implementation-option` 경로로 적용하며, sidecar 자체는 승인 게이트 검증을 우회하지 않습니다.
+- 파서는 `scripts/okstra_ctl/user_response.py` `parse_user_response_approval` 이며, producer 출력과 byte-identical 한 소문자 `Approved: true` 만 인정합니다 (손편집된 `TRUE` 등은 fail-closed 로 불인정).
+- `--resume-clarification` 은 sidecar 를 verbatim 첨부하므로 APPROVAL 블록도 그대로 실립니다 — planning 재실행 입력에서는 무해한 잔류 정보입니다.
+
 ## 호환성 규칙
 
 - `Kind` 가 알 수 없는 값이면 폼은 `<textarea>` fallback 으로 렌더되며, 직렬화 시 받은 `Kind` 문자열을 그대로 보존합니다.

package/runtime/validators/validate-implementation-plan-stages.py

@@ -12,6 +12,13 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import List, Tuple
 
+# scripts/ is not a package; insert it so okstra_ctl is importable directly.
+_SCRIPTS_DIR = Path(__file__).resolve().parent.parent / "scripts"
+if str(_SCRIPTS_DIR) not in sys.path:
+    sys.path.insert(0, str(_SCRIPTS_DIR))
+
+from okstra_ctl.md_table import split_pipe_row  # noqa: E402
+
 STAGE_MAP_HEADING = re.compile(r"^##\s+5\.5\s+Stage\s+Map\b", re.M)
 REQUIRED_SUBSECTIONS = (
     "Carry-In",
@@ -60,7 +67,7 @@ def _parse_stage_map(text: str) -> Tuple[List[StageMeta], List[ValidationError]]
             break
         if not line.strip().startswith("|"):
             continue
-        cells = [c.strip() for c in line.strip().strip("|").split("|")]
+        cells = split_pipe_row(line)
         if len(cells) != 5:
             continue
         # skip header and separator rows (all-dash of any length is covered by set check)
@@ -119,7 +126,7 @@ def _effective_step_rows(section: str) -> List[List[str]]:
             continue
         if not s.startswith("|"):
             continue
-        cells = [c.strip() for c in s.strip("|").split("|")]
+        cells = split_pipe_row(s)
         first_cell = cells[0]
         if first_cell.lower() == "step":
             continue

package/runtime/validators/validate-report-views.py

@@ -35,6 +35,7 @@ from okstra_ctl.clarification_items import (  # noqa: E402
 )
 from okstra_ctl.report_views import (  # noqa: E402
     extract_html_digest,
+    plan_approval_context,
     source_digest,
 )
 
@@ -99,7 +100,7 @@ def validate(report_path: Path) -> list[str]:
     # html sibling (see report_views.report_has_clarification_items). When
     # there are no C-* rows and no html, that is the expected skip state.
     if not html_path.is_file():
-        if not md_ids:
+        if not md_ids and plan_approval_context(report_path, md) is None:
             return []
         return [f"missing html artifact: {html_path}"]
 

package/runtime/validators/validate-run.py

@@ -40,6 +40,10 @@ from okstra_ctl.conformance import (  # noqa: E402
     qa_result_from_dict,
     validate_conformance_manifest,
 )
+from okstra_ctl.md_table import (  # noqa: E402
+    is_separator_row as _is_markdown_separator,
+    split_pipe_row as _split_pipe_row,
+)
 
 TERMINAL_STATUSES = {"completed", "timeout", "error", "not-run"}
 ATTEMPTED_STATUSES = {"completed", "timeout", "error"}
@@ -624,7 +628,7 @@ def _scan_token_usage_summary(content: str, failures: list[str]) -> None:
             # Skip non-table lines, the header separator (`|------|`), and
             # blank lines. Header rows have no backticks so they self-skip.
             continue
-        cells = [c.strip() for c in line.strip("|").split("|")]
+        cells = _split_pipe_row(line)
         if not cells:
             continue
         label_cell = cells[0].strip("* `")
@@ -1214,27 +1218,12 @@ _CELL_ANCHOR_RE = re.compile(r'<a id="[^"]*"></a>')
 
 
 def _split_markdown_row(line: str) -> list[str]:
-    stripped = line.strip()
-    if stripped.startswith("|"):
-        stripped = stripped[1:]
-    if stripped.endswith("|"):
-        stripped = stripped[:-1]
     return [
         _CELL_ANCHOR_RE.sub("", cell).strip().strip("`").strip()
-        for cell in stripped.split("|")
+        for cell in _split_pipe_row(line)
     ]
 
 
-def _is_markdown_separator(line: str) -> bool:
-    stripped = line.strip()
-    if not stripped.startswith("|"):
-        return False
-    for cell in stripped.strip("|").split("|"):
-        if not re.fullmatch(r"\s*:?-{2,}:?\s*", cell):
-            return False
-    return True
-
-
 def _append_requirement_coverage_failures(
     content: str,
     gate_value: str,