open-multi-agent-kit 0.79.3 → 0.80.2

package/docs/native-root-runtime-hardening.md

@@ -1,29 +1,32 @@
 # Native Root Runtime Hardening
 
-Last updated: 2026-05-24
-Current `new-origin/main`: `6305e2b62185c11549f59e2340936769a3027cdd`
+Last updated: 2026-06-15
+Current package version: `open-multi-agent-kit@0.79.3`
+Runtime contract family: `v1.2`
+Release channel: `pre-1.0`
 
 ## Current State
 
-OMK is now on the right architectural path: OMK is the root orchestrator and Kimi is one provider adapter, with Codex, DeepSeek, OpenCode, CommandCode, and future adapters routed through OMK-owned runtime contracts.
+OMK is the root orchestrator. Kimi, Codex, DeepSeek, OpenCode, CommandCode, GLM, and future providers are runtime/provider lanes selected through OMK-owned contracts. API advisory runtimes remain read/review/advisory unless a runtime-mode contract grants write/shell/merge authority.
 
-This is still a hardening milestone, not a stable provider-neutral release claim. The current release stop condition is:
+This is still a hardening milestone, not a stable 1.x or OS-level sandbox claim. The current release stop condition is:
 
 - Local `npm run release:check` must pass on the exact release diff.
-- GitHub Actions Smoke Test must pass on the exact commit.
-- GitHub Actions CI must pass on the exact commit.
-- Release evidence must be kept under `.omk/release-evidence/<short-sha>/` or an equivalent run artifact path.
+- GitHub Actions Smoke Test must pass on the exact commit/tag.
+- GitHub Actions CI or Release workflow gates must pass on the exact commit/tag.
+- npm registry `latest` must be verified when a release claim references a published version.
+- Release evidence must be kept under `.omk/runs/<run-id>/`, `.omk/release-evidence/<short-sha>/`, or an equivalent run artifact path.
 
 Fresh verification at the time of this update:
 
-- `new-origin/main` points at `6305e2b62185c11549f59e2340936769a3027cdd`.
-- GitHub Actions Smoke Test for that commit completed successfully.
-- GitHub Actions CI for that commit failed on Windows test jobs, so v1.1.18 publish/tag remains blocked.
+- `open-multi-agent-kit@0.79.3` is published as npm `latest`.
+- Main CI, main Smoke, tag Release, and tag Smoke passed for `v0.79.3` after rerunning transient failures.
+- Local verification for the machine-checkable hardening slice passed: `npm run check`, `npm run build:clean`, `npm run lint`, `npm run secret:scan`, `npm run version:check`, targeted runtime tests, and `npm test`.
 
 For the LaTeX/paper-ready algorithm appendix and acceptance criteria, see
 [Native Root Runtime Algorithms](./native-root-runtime-algorithms.md). Treat
-that appendix as hardening criteria, not a stable-release proof, until the
-exact release diff passes CI, smoke, and local release gates.
+that appendix as hardening criteria; release claims still require exact-diff
+local gates, CI/smoke, and registry evidence.
 
 ## Runtime Safety Contract
 
@@ -43,7 +46,7 @@ Native chat turns must be default-safe. A turn should request only the minimum c
 |-----------|----------------|--------------|
 | `read` | explain, review, summarize, inspect docs | `read` only |
 | `write` | edit, fix, implement, refactor | `read`, `write`, `patch` |
-| `shell` | run tests, build, execute commands | `read`, `write`, `shell` with approval policy |
+| `shell` | run tests, build, execute commands | `read`, `write`, `shell` with approval policy and required command evidence |
 | `merge` | publish, release, push, merge, destructive changes | authority provider plus release/security gates |
 
 DeepSeek remains an advisory/read/review lane unless an explicit future contract grants safe write/shell execution. Write/shell tasks should route to Kimi, Codex, or a configured authority provider with the matching approval and sandbox policy.
@@ -75,9 +78,7 @@ Unknown or unresolved authority must fail with remediation instead of silently d
 
 ### Provider health probes
 
-Related: Algorithm 5. Current routing uses available registry, capability, and
-evidence metadata; uniform auth/model/quota health remains part of this
-hardening backlog.
+Related: Algorithm 5. Runtime routing now filters unavailable runtimes in async execution paths and includes health in normalized route scoring. The next hardening step is to expand every adapter to a uniform auth/model/quota/rate-limit/latency vector.
 
 Provider bootstrap must distinguish:
 
@@ -94,31 +95,40 @@ Related: Algorithm 4 and Algorithm 7.
 
 MCP, skills, and hooks must not disappear silently. Runtime manifests should include diagnostics for parse/read failures, unknown names, and scope drops. If a task requires runtime MCP, invalid MCP config is a hard failure.
 
+## Current status after 0.79.3 hardening
+
+Completed foundations:
+
+- Runtime authority is resolved by `(provider, runtimeMode)` through `src/runtime/authority-matrix.ts`; native routing also consults this matrix instead of maintaining a separate advisory-provider list.
+- `OMK_TOOL_AUTHORITY_MODE=enforce` coverage is release-gated through the shared `release:gate-core` script and includes a native-turn subprocess enforcement smoke.
+- Native prompt payloads are private artifacts; public synthetic node labels carry prompt hashes, not raw prompts.
+- `prompt:privacy:check` audits private prompt artifacts against public run artifacts, decision traces, and graph-memory snapshots, and is part of the release gate.
+- Per-turn route/result artifacts are written best-effort and replay-indexed with SHA-256 hashes.
+- Evidence declarations and produced observations are type-separated; command/test evidence requires high-confidence metadata or artifact observations, not stdout keywords alone, and DAG executor/verify/replay paths bridge through the same EvidenceGate v2 contract.
+- Provider route/evidence audit nodes are materialized into local graph memory on native turns, with Provider/Artifact nodes, `EvidenceRequirement -> SATISFIED_BY -> EvidenceObservation` semantics, and route/evidence/artifact edges.
+- Runtime health checks accept requested probe levels; API, local LLM, Codex CLI, and external CLI adapters perform static/cheap/live probes with latency and auth/model/quota/rate-limit dimensions where observable. Router health scoring is normalized and high-risk probes fail closed on unknown runtime/auth/model dimensions.
+- Runtime failure stderr is redacted before public exposure and can be retained as a private redacted full artifact in debug mode, including direct `toTaskResult` conversion paths outside `RuntimeRouter`.
+- Mixed-provider advisory reviewer + CLI coder/verifier routing has regression coverage.
+- Native risk classification is negation-aware, so excluded scopes such as `릴리즈 제외`, `no release`, or `npm 체크 제외` do not trigger false merge/shell routing.
+- Runtime routing now classifies failed attempts (`auth`, `quota`, `rate_limit`, `timeout`, `model`, `runtime`, `authority`, `transient`) and opens short-lived in-process circuit breakers so fallback runtimes are tried without repeatedly hitting known-bad adapters.
+- Runtime scoring reads audit-graph `ProviderRoute -> EVIDENCED_BY -> Evidence` pass/fail observations, so local graph memory can influence future route ordering without exposing raw logs.
+- The scheduler exposes critical-path runnable-plan metadata (`criticalPathDepth`, downstream fanout, score, evidence flags) for replay/debug panels.
+- Headroom compaction uses an explicit `omk.structured-compaction.v1` contract for required task/routing/evidence/safety/capability sections.
+
 ## P0 Backlog
 
-1. Infer native turn risk before building the DAG node; do not default every turn to write/shell.
-2. Keep explicit DeepSeek routes read-only/advisory or block write/shell with a clear fallback message.
-3. Propagate approval policy and sandbox mode into runtime adapters, especially Codex CLI.
-4. Resolve `authority` to a concrete provider during runtime bootstrap.
-5. Replace binary-only provider auth checks with structured provider health probes.
-6. Keep release evidence current; do not tag/publish while CI is red.
+1. Keep release evidence current; do not tag/publish while exact-diff CI/smoke or registry verification is missing.
 
 ## P1 Backlog
 
-1. Make `/model` either a real live state update or clearly restart-only.
-2. Use the provider registry as the source of truth for DeepSeek default models.
-3. Remove `cmd` as a CommandCode fallback binary.
-4. Emit tool-plane diagnostics for MCP config parse/read failures.
-5. Gate Kimi failure stderr previews behind `OMK_DEBUG=1` and redaction.
-6. Preserve routing metadata in external CLI adapter `execute(task)` paths.
+1. Extend exact-diff CI status ingestion once a remote check surface is available in the current runtime.
+2. Add provider-specific model-existence probes where vendors expose safe no-token model metadata or non-generating validation endpoints.
 
 ## P2 Backlog
 
 1. Add configurable non-zero exit behavior for native root-loop turn failures.
-2. Move prompt envelopes out of `DagNode.name` into structured payload fields.
-3. Validate capability names before prompt/runtime injection.
-4. Persist per-turn route artifacts under `.omk/runs/<run-id>/turns/<turn-id>.json`.
-5. Link provider routes and evidence gates into graph memory for replay/audit.
+2. Add experimental OS sandbox modes only behind explicit opt-in and without public stable claims.
+3. Add broader pty/TTY regression coverage for scroll-safe rendering and interactive selectors.
 
 ## Spec-Kit Acceptance Gates
 

package/docs/post-0793-hardening-roadmap.md

@@ -0,0 +1,123 @@
+# OMK Post-0.79.3 Algorithm Hardening Roadmap
+
+> Package version: `open-multi-agent-kit@0.79.3`  
+> Runtime contract family: `v1.2`  
+> Release channel: `pre-1.0`  
+> Last updated: 2026-06-16
+
+## 1. Current state
+
+OMK v0.79.3 already moved past the "single Kimi wrapper" stage. The following native-orchestrator hardening is already in place:
+
+- `RuntimeHealthVector` and health-aware routing in `RuntimeRouter`.
+- Authority policy resolver (`authority`/`primary`/`omk` → concrete provider).
+- Evidence-required blocking in `RuntimeBackedTaskRunner` and `CompiledDagExecutor`.
+- Advisory-only runtime boundary for API providers (DeepSeek, Kimi API, local-llm, MiMo).
+- Native turn risk classifier with confidence/matched-signal trace.
+- Per-turn route/result artifacts under `.omk/runs/<runId>/turns/`.
+- Headroom compaction guard that preserves required structural context.
+- Theme/version sync gate.
+
+This document describes the next stages of algorithm hardening and how to execute them safely.
+
+## 2. Hardening philosophy
+
+1. **Contract-first**: change types and contracts before implementations.
+2. **Evidence-driven**: every gate must be replayable; declarations are not evidence.
+3. **Runtime-mode authority**: authority belongs to `(provider, runtimeMode)`, not provider identity alone.
+4. **Fail-closed by default**: missing authority, missing evidence, or unknown health must block, not fall back silently.
+5. **Backward compatible**: existing Kimi chat smoke tests and public CLI behavior must keep passing.
+6. **Gradual rollout**: use feature flags, staged tool authority modes (`shadow` → `warn` → `enforce`), and isolated test files.
+
+## 3. Phase roadmap
+
+### Phase 1 — Foundation (contract stabilization)
+
+**Goal**: make authority, safety, and health first-class contracts so later phases do not fight the type system.
+
+| Task | Deliverable | Acceptance |
+|------|-------------|------------|
+| P1.1 Runtime-mode authority matrix | `src/runtime/authority-matrix.ts` + matrix doc update | Single source of truth; provider-maturity.md aligned |
+| P1.2 `AgentTask.safety` elevation | `AgentTask.safety` required field + `capsuleToTask` injection | TypeScript compile fails if adapter ignores safety |
+| P1.3 Tri-state health vector v2 | `HealthState` + probe cache + adaptive TTL | Unknown penalized less than fail; all adapters return v2 or unknown |
+
+**Verification**: `npm run check`, `npm run version:check`, existing tests still pass.
+
+### Phase 2 — Evidence semantics v2
+
+**Goal**: separate declared evidence requirements from actual observations.
+
+| Task | Deliverable | Acceptance |
+|------|-------------|------------|
+| P2.1 Evidence model split | `EvidenceRequirement` vs `EvidenceObservation` types | No function treats declaration as proof |
+| P2.2 Observation extraction | Extractors for metadata/stdout/artifact/file | Each observation has timestamp, source, replay flag, redaction flag |
+| P2.3 Runtime evidence gate v2 | `RuntimeBackedTaskRunner` uses observations | Pre-check is declaration-only; post-check is observation-based |
+| P2.4 DAG executor alignment | `CompiledDagExecutor` uses same observation model | `checkNodeEvidence` returns observations, not gate marks |
+
+**Verification**: New negative tests: missing observation → exit 78; declared gate without observation → not satisfied.
+
+### Phase 3 — Observability and audit
+
+**Goal**: make every turn replayable and auditable through graph memory and private artifacts.
+
+| Task | Deliverable | Acceptance |
+|------|-------------|------------|
+| P3.1 Prompt payload separation | `DagNode.name` is a redacted label; full prompt stored privately | Public summary contains no compiled prompt |
+| P3.2 Turn audit graph materialization | Turn/ProviderRoute/Evidence nodes in local graph | Query `run → provider → evidence` works |
+| P3.3 Replay index with artifact hashes | `.omk/runs/<runId>/replay-index.json` | All artifact refs are hash-matched |
+
+**Verification**: `omk graph view` shows audit nodes; replay index validates against filesystem.
+
+### Phase 4 — Release gate hardening
+
+**Goal**: make authority and evidence failures part of the release pipeline.
+
+| Task | Deliverable | Acceptance |
+|------|-------------|------------|
+| P4.1 Tool-authority enforce smoke matrix | `scripts/authority-smoke.mjs` | enforce/warn/shadow cases pass |
+| P4.2 Health-degraded routing tests | Tests for unknown/fail health states | Routing scores reflect tri-state correctly |
+| P4.3 Evidence-v2 negative tests | Missing observation tests | Failures produce exit 78 + diagnostic |
+| P4.4 CI integration | GitHub Actions runs authority smoke | CI fails on authority regression |
+
+**Verification**: `npm run release:check` includes new smoke matrix.
+
+## 4. Dependency graph
+
+```text
+P1.1 authority matrix
+    ├── P1.2 safety contract
+    │       ├── P2.1 evidence model split
+    │       │       ├── P2.3 runtime evidence gate v2
+    │       │       ├── P2.4 DAG executor alignment
+    │       │       ├── P3.1 prompt payload separation
+    │       │       └── P3.2 audit graph materialization
+    │       └── P4.1 tool-authority enforce smoke
+    └── P1.3 health vector v2
+            └── P4.2 health-degraded routing tests
+```
+
+## 5. Rollback strategy
+
+- Each phase lives in a separate feature branch or at minimum a separate commit.
+- Phase 1 changes are foundational; if they break main, revert immediately and re-plan.
+- Phases 2–4 can be toggled via environment flags if implementations are feature-flagged:
+  - `OMK_EVIDENCE_MODEL=v2`
+  - `OMK_HEALTH_VECTOR=v2`
+  - `OMK_PROMPT_PAYLOAD=private`
+- Keep existing tests green; add new tests for new behavior; never delete old tests until a full release passes.
+
+## 6. Success criteria
+
+1. `npm run check` passes after every phase.
+2. `npm run release:check` passes after Phase 4.
+3. All new negative tests pass.
+4. Provider-maturity.md and hardening.md reflect runtime-mode authority.
+5. No compiled prompt appears in public graph nodes or run summaries.
+6. Every high-risk turn leaves replayable evidence artifacts.
+
+## 7. Related documents
+
+- `docs/native-root-runtime-hardening.md`
+- `docs/provider-maturity.md`
+- `docs/algorithm-hardening-playbook.md`
+- `.omk/runs/post-0793-hardening-2026-06-16/orchestration-spec.md`

package/docs/provider-maturity.md

@@ -4,25 +4,27 @@ This page documents provider status for the current source tree.
 
 ## Current source target
 
-- Package version: `0.79.3`
+- Package version: `0.80.2`
 - Runtime contract family: `v1.2`
 - Release channel: `pre-1.0`
 
-## Provider matrix
-
-This table describes built-in source defaults. `omk provider list --json` also merges user-local provider configuration, so local output may include custom providers or changed enabled/configured flags.
-
-| Provider | Default model / runtime | Routing role | Auth/config source | Current maturity |
-| --- | --- | --- | --- | --- |
-| Kimi | `kimi-k2.6` / `kimi-api` | Default coding authority and compatibility fallback | Provider/runtime config; no OMK-managed OAuth exchange | Most mature authority path. Still subject to API/key/runtime availability. |
-| MiMo | `mimo-v2.5-pro` / `mimo-api` | Runtime provider for read/review/thinking lanes; advisory after authority downgrade in API runtime | `MIMO_API_KEY` | RC path. Do not claim direct workspace-write authority from the API runtime. |
-| DeepSeek | `deepseek-v4-flash`, `deepseek-v4-pro` | Read/review/QA/research/advisory lanes; direct only for low-risk read-only routes | `DEEPSEEK_API_KEY` or user-local DeepSeek config | Mature enough for opportunistic advisory/read-only lanes; write, MCP, and merge authority stay with the authority provider. |
-| Qwen | `qwen3-max` | Advisory/read/research/review/QA routes | `DASHSCOPE_API_KEY` | Configured provider path exists; broader release-gate coverage is still pending. |
-| OpenRouter | `openrouter/auto` | Advisory/read/research/review/QA routes | `OPENROUTER_API_KEY`; provider-side BYOK/OAuth | Configured provider path exists; OMK records env-var metadata, not secret values. |
-| Codex | `codex-cli` | External CLI provider for read/plan/review/advisory and explicit policy routes | Official Codex CLI login; OMK does not read token files | Compatibility path. MCP authority is not granted to Codex CLI routes. |
-| OpenCode | `opencode-cli` | External CLI runtime for read/write/shell/patch/review when selected and available | External CLI auth/config | Compatibility path; availability depends on the local CLI. |
-| CommandCode | `commandcode-cli` | External CLI runtime for read/write/shell/patch/review when selected and available | External CLI auth/config | Compatibility path; availability depends on the local CLI. |
-| Local LLM | `qwen3-coder-30b-a3b` at `http://localhost:8080/v1` | Local OpenAI-compatible runtime | Local endpoint; optional `LOCAL_LLM_API_KEY` | Local preview path. API runtime rejects direct shell/tool-calling authority. |
+## Runtime-mode authority matrix
+
+Authority belongs to `(provider, runtimeMode)`, not provider identity alone. The source of truth is `src/runtime/authority-matrix.ts`.
+
+| Runtime mode | Authority class | Allowed authority | Current maturity |
+| --- | --- | --- | --- |
+| `kimi:api` | advisory API | read, review, vision, advisory tool-calling | Mature read/review path. No direct workspace write/shell/merge authority. |
+| `kimi:wire` / `kimi:cli` | OMK-controlled compatibility path | read, review, write, patch, vision, tool-calling | Compatibility authority for edits only when routed through OMK controls. Shell/merge stay separately gated. |
+| `mimo:api` | advisory API | read, review, thinking | Default model provider for advisory/thinking lanes. No direct workspace write authority. |
+| `deepseek:api` | advisory API | read, review | Opportunistic read/review/QA/research. Write, MCP, shell, merge blocked. |
+| `glm:api` | advisory API | read, review | Advisory/thinking path; broader release-gate coverage pending. |
+| `codex:cli` | bounded CLI | read, review, write, patch, shell | Workspace authority only under OMK approval/sandbox policy. Merge withheld. |
+| `opencode:cli` | bounded CLI | read, review, write, patch, shell | Compatibility path; availability depends on local CLI and auth. |
+| `commandcode:cli` | bounded CLI | read, review, write, patch, shell | Compatibility path; availability depends on local CLI and auth. |
+| `local-llm:api` | advisory API | read, review | Local preview path. API runtime rejects direct shell/tool-calling authority. |
+
+`omk provider list --json` also merges user-local provider configuration, so local output may include custom providers or changed enabled/configured flags.
 
 ## Routing rules to preserve
 

package/docs/versioning.md

@@ -4,11 +4,11 @@ OMK uses two version fields in release artifacts:
 
 | Field | Current value | Source | Meaning |
 | --- | --- | --- | --- |
-| Package version | `0.79.3` | `package.json`, `package-lock.json` | npm/package source version. |
+| Package version | `0.80.2` | `package.json`, `package-lock.json` | npm/package source version. |
 | Runtime version | `v1.2` | `src/version.ts`, JSON schemas | Contract/runtime family used by OMK envelopes. |
 | Release channel | `pre-1.0` | `src/version.ts` | Pre-1.0 package channel. |
 
-`0.79.3` is the package source version for the `v1.2` runtime contract family.
+`0.80.2` is the package source version for the `v1.2` runtime contract family.
 Use `v1.2` only for runtime contracts; do not substitute it for the package version.
 
 ## Contract versions
@@ -50,6 +50,6 @@ The `version --json` command emits one `omk.contract.v1` envelope whose data pay
 
 ## Documentation rules
 
-- Use `0.79.3` when referring to the current package source version.
+- Use `0.80.2` when referring to the current package source version.
 - Use `v1.2` only for the runtime contract family.
 - Keep historical changelog entries unchanged unless the text is not clearly historical.

package/docs/what-is-omk.md

@@ -53,7 +53,7 @@ omk do "review this repo for release risk" --dry-run --json
 
 ## Maturity
 
-Current source version: `open-multi-agent-kit@0.78.9` (`pre-1.0`). The `v1.2` label is a runtime contract family, not a stable npm `1.x` release. OS-level sandboxing is planned, not claimed. See [versioning](versioning.md), [claims](claims.md), and [SECURITY.md](../SECURITY.md).
+Current source version: `open-multi-agent-kit@0.80.2` (`pre-1.0`). The `v1.2` label is a runtime contract family, not a stable npm `1.x` release. OS-level sandboxing is planned, not claimed. See [versioning](versioning.md), [claims](claims.md), and [SECURITY.md](../SECURITY.md).
 
 ## Related
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-multi-agent-kit",
-  "version": "0.79.3",
+  "version": "0.80.2",
   "description": "Provider-neutral multi-agent control plane for coding workflows: route agents, verify evidence, orchestrate MCP-aware DAGs, and control the loop from the omk CLI.",
   "type": "module",
   "bin": {
@@ -24,11 +24,15 @@
     "audit:package": "node scripts/package-audit.mjs",
     "smoke": "node scripts/smoke-test.mjs",
     "smoke:execution": "node scripts/smoke-execution.mjs",
+    "authority:smoke": "npm run build:clean && node scripts/authority-smoke.mjs",
+    "prompt:privacy:check": "node scripts/prompt-privacy-audit.mjs",
+    "release:gate-core": "npm run verify:no-kimi && npm run verify:no-persona && npm run contract:check && npm run schema:check && npm run version:check && npm run proof:check && npm run authority:smoke && npm run prompt:privacy:check && npm run smoke:execution && npm run pack:dry && npm run audit:package && npm run smoke:pack && OMK_RELEASE_DEMO=1 node scripts/release-gate.mjs",
     "smoke:pack": "node scripts/pack-smoke.mjs",
     "prepare": "npm run build",
     "yaml:check": "node scripts/validate-yaml.mjs",
     "schema:check": "node scripts/validate-json-contracts.mjs",
     "theme:check": "node scripts/theme-check.mjs --out proof/theme-check",
+    "theme:sync": "node scripts/sync-themes.mjs",
     "assets:build": "node scripts/assets-build.mjs",
     "assets:check": "node scripts/assets-check.mjs",
     "color:gate": "node scripts/color-literal-gate.mjs",
@@ -40,10 +44,10 @@
     "contract:check": "npm run build:clean && npm run schema:check && node scripts/check-json-stdout.mjs",
     "verify:contracts": "npm run contract:check",
     "verify:no-persona": "node scripts/verify-no-persona.mjs",
-    "release:check": "npm run verify:no-kimi && npm run verify:no-persona && npm run contract:check && npm run schema:check && npm run version:check && npm run proof:check && npm run smoke:execution && npm run pack:dry && npm run audit:package && npm run smoke:pack && OMK_RELEASE_DEMO=1 node scripts/release-gate.mjs",
-    "release:full": "npm run verify && npm run verify:no-kimi && npm run verify:no-persona && npm run contract:check && npm run schema:check && npm run version:check && npm run proof:check && npm run smoke:execution && npm run pack:dry && npm run audit:package && npm run smoke:pack && OMK_RELEASE_DEMO=1 node scripts/release-gate.mjs",
+    "release:check": "npm run release:gate-core",
+    "release:full": "npm run verify && npm run release:gate-core",
     "regression:matrix": "node scripts/regression-proof-matrix.mjs",
-    "release:rc": "npm run verify && npm run verify:no-kimi && npm run verify:no-persona && npm run contract:check && npm run schema:check && npm run version:check && npm run proof:check && npm run smoke:execution && npm run pack:dry && npm run audit:package && npm run smoke:pack && OMK_RELEASE_DEMO=1 node scripts/release-gate.mjs",
+    "release:rc": "npm run verify && npm run release:gate-core",
     "smoke:no-kimi:chat": "OMK_MCP_PREFLIGHT=off OMK_PROJECT_ROOT=\"$PWD\" node dist/cli.js chat --provider auto --mode agent --execution ask --layout plain --mcp-scope none --smoke --json",
     "smoke:no-kimi:codex": "OMK_MCP_PREFLIGHT=off OMK_PROJECT_ROOT=\"$PWD\" node dist/cli.js chat --provider codex --mode agent --execution ask --layout plain --mcp-scope none --smoke --json",
     "smoke:no-kimi:doctor": "OMK_PROJECT_ROOT=\"$PWD\" node dist/cli.js doctor --json",

package/readmeasset/.npmignore

@@ -11,6 +11,8 @@
 !omk-runtime-flow-0.78.0.webp
 !omk-github-header.webp
 !omk-github-banner.webp
+!omk-freedomd-control-plane.webp
+!omk-freedomd-control-plane.svg
 !omk-logo-mark.svg
 !omk-logo-512.png
 !omk-install-card.png

package/readmeasset/ASSET_INDEX.md

@@ -4,6 +4,8 @@ Curated OMK//CONTROL assets in this directory. Assets are provenance-covered and
 
 | File                            | Packaged  | Purpose                                        | Source                                     | Dimensions  | Format |  Bytes |
 | ------------------------------- | --------- | ---------------------------------------------- | ------------------------------------------ | ----------- | ------ | -----: |
+| `omk-freedomd-control-plane.webp` | yes | v0.80.2 Freedomd README hero | Codex OAuth gpt-image-2 with `omk-control.webp` style reference | `1983x793` | `WEBP` | 1877984 |
+| `omk-freedomd-control-plane.svg` | yes | v0.80.2 Freedomd README fallback | deterministic local SVG fallback retained for provenance | `1600x640` | `SVG` | 4415 |
 | `omk-control.webp`              | yes       | Canonical README hero                          | Codex/OpenAI Images reviewed source        | `1536x1024` | `WEBP` | 164502 |
 | `omk-social-preview.png`        | yes       | GitHub/NPM social preview                      | local crop from omk-control.webp           | `1200x630`  | `PNG`  | 737974 |
 | `social-preview.png`            | repo-only | GitHub social preview upload candidate         | local Pillow render from omk-control.webp  | `1280x640`  | `PNG`  | 441349 |

package/readmeasset/ASSET_PROVENANCE.md

@@ -87,16 +87,36 @@
 | `omk-evidence-loop-0.78.0.webp` | omk-runtime-flow-0.78.0.webp | Evidence bundle and verify gate crop | `900x774` | `WEBP` | 60808 | `2c4bf27d738710461b9979144759e06a99729ffcc97f53d1bd985b503b0f99da` |
 | `omk-runtime-flow-wide.webp` | omk-runtime-flow-0.78.0.webp | Runtime flow wide strip | `1485x178` | `WEBP` | 45258 | `9edac732cd8de0533e345337392f3dca464a9d8a2f08d8b7a464b685a8da45ce` |
 | `omk-architecture-strip.webp` | omk-tui-0.78.0.webp | TUI command timeline and evidence ledger strip | `1536x273` | `WEBP` | 71128 | `c76b825863260ecff832e31d986b91d341903f929faa62727511a594cb714cfe` |
-| `omk-core-loop.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | OMK Core Loop | `1200x420` | `SVG` | 2731 | `0f60a453833c541a05db3b509f9d56fae02c38c89334c7c57357f281cad439f2` |
-| `omk-control-surfaces.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Operator control surfaces | `1200x420` | `SVG` | 3325 | `2295e2048336452a7abef90c0636107be36845946976fd79563f10092b22bd99` |
-| `omk-release-assertions.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Release assertion card | `1200x420` | `SVG` | 3052 | `8040d23c46bf48fd7f946f9ff491dcad8aa41ce023b7b062ff5475667c8f283d` |
-| `omk-init-control-loop.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Init to control loop | `1200x520` | `SVG` | 7339 | `e6225f8b66a89353aff109d29b2943b0b292f10195a84a770030a63687478739` |
-| `omk-parallel-subagents.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Parallel subagent lanes | `1200x520` | `SVG` | 6559 | `16de0ab85063c45260f6d6545df0c5721ca6cf8c650c8d1223296acea22d0017` |
-| `omk-adaptorch-ouroboros-supermemory.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Adaptive memory stack | `1200x520` | `SVG` | 6404 | `6f7318675939f9190ed9011f2f0f02e2a5a34d1ab2fac8d3fe10a92f9a441d54` |
-| `omk-provider-lanes.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Provider Lanes | `1200x420` | `SVG` | 2753 | `d7d85098e02e78d37d10a9886a041a8546bfa8438dd3f29bb157ce848bfd0b83` |
-| `omk-evidence-ledger.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Evidence Ledger | `1200x420` | `SVG` | 2411 | `01f0d66d2ba9915d9975bd7f93bb790e7ab0e11adbaedf84b4e5c25be6fe837c` |
-| `omk-badges.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | OMK Badges | `1200x420` | `SVG` | 2405 | `4a4c94daca5d81e10a1ca185d3c07d4dfa6ac732363ecbc4bdbde841d4624cf6` |
-| `omk-logo-mark.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Vector OMK logo mark | `512x512` | `SVG` | 649 | `f5ba6323a9bf471b3c6001d063b90087dece0491ef15c4f0f1ea314785bef124` |
+| `omk-core-loop.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | OMK Core Loop | `1200x420` | `SVG` | 2731 | `2547393a4785294e9fca64b1a7f65e4bc0db43bd967651520e012ff585a7c34d` |
+| `omk-control-surfaces.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Operator control surfaces | `1200x420` | `SVG` | 3325 | `2595a96a0120c1558d2ee5396b4824520523be3292b7ad901b4ffcaa3131e637` |
+| `omk-release-assertions.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Release assertion card | `1200x420` | `SVG` | 3052 | `e787d617c39c96e0ab82fb0a06ed4c0183f1629e11c0190f58565004c92e348e` |
+| `omk-init-control-loop.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Init to control loop | `1200x520` | `SVG` | 7339 | `61e28a5627b310687b4d7df4b014ca09479f502e30f67315877158be27cd2d41` |
+| `omk-parallel-subagents.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Parallel subagent lanes | `1200x520` | `SVG` | 6559 | `6b0ed3e17b3e3d8eefe92ff960a3d3c00d2423992e37a4b2a178b3ffe3d9bc80` |
+| `omk-adaptorch-ouroboros-supermemory.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Adaptive memory stack | `1200x520` | `SVG` | 6404 | `8cf64e0f61476bf14eb20cf16f1054f2fb803235f12ab225959eaae024bb2e83` |
+| `omk-provider-lanes.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Provider Lanes | `1200x420` | `SVG` | 2753 | `9595e13ae4558dfe05d73770400f37d5264c5f02053497a0e518670ea7abd2d5` |
+| `omk-evidence-ledger.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Evidence Ledger | `1200x420` | `SVG` | 2411 | `c81dd3802c14c790b3657b2384d3a84f53a0dd062ddcf07ab763df95f93848d5` |
+| `omk-badges.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | OMK Badges | `1200x420` | `SVG` | 2405 | `d8baeae6d095fbfd222d82ea4355f059d797e141b810775045d70bd7f07c4a4e` |
+| `omk-logo-mark.svg` | themes/night-city.theme.json via scripts/assets-build.mjs | Vector OMK logo mark | `512x512` | `SVG` | 649 | `ed8673ae5f10f4abdc689169bd81fd489f3ff4aa67a49573aeaffd299e32f3ad` |
+
+
+## omk-freedomd-control-plane.webp
+
+- Packaged path: `readmeasset/omk-freedomd-control-plane.webp`.
+- README usage: GitHub hero for OMK v0.80.2 Freedomd provider-sovereignty control plane.
+- Generator: Codex OAuth image workflow using `gpt-image-2` (`.agents/skills/codex-gpt-image/scripts/codex_gpt_image.py generate`) with `readmeasset/omk-control.webp` as the style reference.
+- Prompt artifact: `.omk/runs/freedomd-release-2026-06-16/codex-oauth-gpt-image-2-prompt.txt`.
+- Prompt SHA-256: `88fcb293216d544ef2794bfd7d64c0e8d13df2dfc0f715bd8933596709fb3f20`.
+- Auth handling: local Codex OAuth availability was checked with `auth-status`; no OAuth token or session secret is stored in this repository or provenance file.
+- Dimensions: `1983x793`; format: `WEBP`; bytes: 1877984; sha256: `ba07098f255b0b8f097485a97f02bba0f52ed44801fb1c4fc707a04a9242bbca`.
+- Review date: 2026-06-16.
+
+## omk-freedomd-control-plane.svg
+
+- Packaged path: `readmeasset/omk-freedomd-control-plane.svg`.
+- README usage: deterministic fallback for OMK v0.80.2 Freedomd provider-sovereignty control plane.
+- Source: deterministic local SVG fallback generated from `DESIGN.md` tokens and current Freedomd runtime features.
+- Original OpenAI Platform prompt artifact: `.omk/runs/freedomd-release-2026-06-16/gpt-image-2-prompt.md`.
+- Dimensions: `1600x640`; format: `SVG`; bytes: 4415; sha256: `00afea70a2cb826bb804d2cad9a2e452a033e6b90672a9d19f15a421a305ee26`.
 
 ## Theme-derived SVG assets (2026-06-10)
 
@@ -104,13 +124,13 @@
 - Generator: `scripts/assets-build.mjs` resolves every `fill`/`stroke`/`stop-color` value from theme primitives and embeds a provenance comment; geometry, layout, and text are preserved.
 - Regeneration command: `npm run assets:build` (re-run after any theme token change; the `@<hash>` suffix is the first 12 hex of the theme file's SHA-256).
 - Light variant: not built — dark-only by ADR, see `docs/decisions/ADR-theme-dark-only-assets.md`. Non-dark themes are refused unless every used pair passes the 4.5/3.0 WCAG gates inline.
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-badges.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-control-surfaces.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-core-loop.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-evidence-ledger.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-logo-mark.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-parallel-subagents.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-provider-lanes.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-release-assertions.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-adaptorch-ouroboros-supermemory.svg`
-- derived-from: omk.theme.v1/night-city@e5daf40d789d — `omk-init-control-loop.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-badges.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-control-surfaces.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-core-loop.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-evidence-ledger.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-logo-mark.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-parallel-subagents.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-provider-lanes.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-release-assertions.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-adaptorch-ouroboros-supermemory.svg`
+- derived-from: omk.theme.v1/night-city@3d22ce435823 — `omk-init-control-loop.svg`

package/readmeasset/omk-adaptorch-ouroboros-supermemory.svg

@@ -1,4 +1,4 @@
-<!-- derived-from: omk.theme.v1/night-city@e5daf40d789d -->
+<!-- derived-from: omk.theme.v1/night-city@3d22ce435823 -->
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="520" viewBox="0 0 1200 520" role="img" aria-labelledby="title desc">
   <title id="title">OMK adaptive memory stack</title>
   <desc id="desc">Adaptorch routes topology, Ouroboros clarifies and evolves goals, and Supermemory recalls stable facts for the OMK control loop.</desc>

package/readmeasset/omk-control-surfaces.svg

@@ -1,4 +1,4 @@
-<!-- derived-from: omk.theme.v1/night-city@e5daf40d789d -->
+<!-- derived-from: omk.theme.v1/night-city@3d22ce435823 -->
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="420" viewBox="0 0 1200 420" role="img" aria-labelledby="title desc">
   <title id="title">OMK operator surfaces</title>
   <desc id="desc">OMK operator surfaces: CLI, provider router, MCP scope, evidence gate, replay ledger, and package audit.</desc>

package/readmeasset/omk-core-loop.svg

@@ -1,4 +1,4 @@
-<!-- derived-from: omk.theme.v1/night-city@e5daf40d789d -->
+<!-- derived-from: omk.theme.v1/night-city@3d22ce435823 -->
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="420" viewBox="0 0 1200 420">
 <rect width="1200" height="420" fill="#070B14"/>
 <defs><filter id="glow"><feGaussianBlur stdDeviation="3" result="b"/><feMerge><feMergeNode in="b"/><feMergeNode in="SourceGraphic"/></feMerge></filter></defs>

package/readmeasset/omk-freedomd-control-plane.svg

@@ -0,0 +1,59 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1600" height="640" viewBox="0 0 1600 640" role="img" aria-labelledby="title desc">
+  <title id="title">OMK Freedomd runtime control plane</title>
+  <desc id="desc">Local-first multi-provider agent control plane with sovereignty routing, evidence envelopes, degraded fallback, and strict guardrail opt-in.</desc>
+  <metadata>omk.asset.v1 name=omk-freedomd-control-plane packaged=yes source=local-svg-render prompt-ready=gpt-image-2.0 text=ascii version=0.80.2</metadata>
+  <defs>
+    <linearGradient id="bg" x1="0" x2="1" y1="0" y2="1">
+      <stop stop-color="#FFF8EF" offset="0"/>
+      <stop stop-color="#F8EAD7" offset="0.55"/>
+      <stop stop-color="#101826" offset="1"/>
+    </linearGradient>
+    <linearGradient id="gold" x1="0" x2="1">
+      <stop stop-color="#FFD96B" offset="0"/>
+      <stop stop-color="#FFC83D" offset="0.55"/>
+      <stop stop-color="#F47719" offset="1"/>
+    </linearGradient>
+    <filter id="shadow" x="-20%" y="-20%" width="140%" height="140%">
+      <feDropShadow dx="0" dy="18" stdDeviation="18" flood-color="#3A1F10" flood-opacity="0.18"/>
+    </filter>
+    <style>
+      .title{font:900 82px system-ui,-apple-system,Segoe UI,sans-serif;fill:#2A170D;letter-spacing:-2px}.sub{font:800 30px system-ui,-apple-system,Segoe UI,sans-serif;fill:#5A3219}.mono{font:700 24px ui-monospace,SFMono-Regular,Menlo,monospace;fill:#FFF8EF}.label{font:900 24px system-ui,-apple-system,Segoe UI,sans-serif;fill:#3A1F10}.tiny{font:800 19px system-ui,-apple-system,Segoe UI,sans-serif;fill:#7D6148}.dark{fill:#101826}.cream{fill:#FFFDF8}.stroke{stroke:#D8B58F;stroke-width:3}.edge{stroke:#815029;stroke-width:5;stroke-linecap:round;opacity:.7}.ok{fill:#2F9B4A}.warn{fill:#B35C00}.danger{fill:#E5482D}.info{fill:#536D7A}
+    </style>
+  </defs>
+  <rect width="1600" height="640" rx="0" fill="url(#bg)"/>
+  <circle cx="1360" cy="86" r="170" fill="#FFD96B" opacity="0.20"/>
+  <circle cx="1510" cy="570" r="260" fill="#9D4EDD" opacity="0.16"/>
+
+  <g transform="translate(92 76)">
+    <rect x="0" y="0" width="610" height="490" rx="36" fill="#FFFDF8" filter="url(#shadow)"/>
+    <rect x="28" y="28" width="554" height="434" rx="28" fill="#FFF4E6" stroke="#EED9C4" stroke-width="3"/>
+    <text x="56" y="108" class="title">Freedomd</text>
+    <text x="58" y="158" class="sub">user-sovereign agent runtime</text>
+    <g transform="translate(58 212)">
+      <rect x="0" y="0" width="488" height="60" rx="18" fill="#101826"/>
+      <text x="24" y="39" class="mono">OMK_FREEDOMD_MODE=balanced</text>
+    </g>
+    <g transform="translate(58 300)">
+      <circle cx="24" cy="24" r="18" class="ok"/><text x="60" y="31" class="label">local-first evidence</text>
+      <circle cx="24" cy="76" r="18" class="warn"/><text x="60" y="83" class="label">jurisdiction + retention gates</text>
+      <circle cx="24" cy="128" r="18" class="info"/><text x="60" y="135" class="label">degraded fallback, never stuck</text>
+    </g>
+  </g>
+
+  <g transform="translate(800 80)">
+    <rect x="0" y="0" width="700" height="486" rx="40" fill="#101826" filter="url(#shadow)"/>
+    <text x="42" y="66" class="mono" fill="#FFD96B">runtime graph</text>
+    <g transform="translate(70 118)">
+      <rect x="0" y="0" width="210" height="86" rx="24" fill="#FFFDF8"/><text x="28" y="38" class="label">Goal</text><text x="28" y="66" class="tiny">DAG + lanes</text>
+      <rect x="340" y="0" width="230" height="86" rx="24" fill="#FFFDF8"/><text x="368" y="38" class="label">Provider Score</text><text x="368" y="66" class="tiny">health + sovereignty</text>
+      <path d="M220 43 L330 43" class="edge"/>
+      <rect x="0" y="170" width="230" height="86" rx="24" fill="#FFFDF8"/><text x="28" y="208" class="label">Retention Gate</text><text x="28" y="236" class="tiny">allow/redact/block</text>
+      <rect x="340" y="170" width="230" height="86" rx="24" fill="#FFFDF8"/><text x="368" y="208" class="label">Fallback Plan</text><text x="368" y="236" class="tiny">local/review/replay</text>
+      <path d="M455 90 L455 160" class="edge"/>
+      <path d="M240 213 L330 213" class="edge"/>
+      <path d="M120 92 L120 160" class="edge"/>
+      <rect x="118" y="332" width="334" height="78" rx="24" fill="url(#gold)"/><text x="156" y="380" class="label">Evidence Envelope + Replay</text>
+      <path d="M120 260 L210 324" class="edge"/><path d="M455 260 L360 324" class="edge"/>
+    </g>
+  </g>
+</svg>

package/readmeasset/omk-init-control-loop.svg

@@ -1,4 +1,4 @@
-<!-- derived-from: omk.theme.v1/night-city@e5daf40d789d -->
+<!-- derived-from: omk.theme.v1/night-city@3d22ce435823 -->
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="520" viewBox="0 0 1200 520" role="img" aria-labelledby="title desc">
   <title id="title">OMK init to control loop</title>
   <desc id="desc">The OMK setup path creates scoped project files, runs doctor checks, then enters the evidence-gated control loop.</desc>

package/readmeasset/omk-logo-mark.svg

@@ -1,4 +1,4 @@
-<!-- derived-from: omk.theme.v1/night-city@e5daf40d789d -->
+<!-- derived-from: omk.theme.v1/night-city@3d22ce435823 -->
 <svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="0 0 512 512">
 <rect width="512" height="512" rx="96" fill="#070B14"/>
 <path d="M256 48 424 144v224L256 464 88 368V144Z" fill="#101826" stroke="#00D6FF" stroke-width="16"/>

package/readmeasset/omk-parallel-subagents.svg

@@ -1,4 +1,4 @@
-<!-- derived-from: omk.theme.v1/night-city@e5daf40d789d -->
+<!-- derived-from: omk.theme.v1/night-city@3d22ce435823 -->
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="520" viewBox="0 0 1200 520" role="img" aria-labelledby="title desc">
   <title id="title">OMK parallel subagents</title>
   <desc id="desc">OMK root control fans out scoped subagent lanes, collects evidence, then synthesizes and verifies the result.</desc>

package/readmeasset/omk-release-assertions.svg

@@ -1,4 +1,4 @@
-<!-- derived-from: omk.theme.v1/night-city@e5daf40d789d -->
+<!-- derived-from: omk.theme.v1/night-city@3d22ce435823 -->
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="420" viewBox="0 0 1200 420" role="img" aria-labelledby="title desc">
   <title id="title">OMK release assertions</title>
   <desc id="desc">Package, binary, gate, and package-safety assertions for open-multi-agent-kit releases.</desc>