openpond 0.0.62 → 0.0.63

package/dist/chunks/{app-layer-MSLVVYLM.js → app-layer-TUAFALOE.js}

@@ -4,9 +4,9 @@ import {
 } from "./chunk-J2REM7LE.js";
 import {
   CliUsageError
-} from "./chunk-64LYEFLR.js";
+} from "./chunk-LEL5AQJU.js";
 import "./chunk-SMNFI2FU.js";
-import "./chunk-GMX47RLP.js";
+import "./chunk-YDH34BGG.js";
 import "./chunk-K4JEWEJQ.js";
 import "./chunk-JGOP4GCK.js";
 import "./chunk-DBHSOTYZ.js";

package/dist/chunks/{app-server-runtime-BRG7A5VD.js → app-server-runtime-O26LVUYH.js}

@@ -2,14 +2,14 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 import {
   APP_SERVER_COMPOSITION,
   createOpenPondAppServer
-} from "./chunk-4NHAH3MT.js";
-import "./chunk-MBF44RYK.js";
+} from "./chunk-V2CTXKS2.js";
+import "./chunk-66KQLYSH.js";
 import "./chunk-OYWTQABY.js";
-import "./chunk-FYB6ELFM.js";
-import "./chunk-BFAL2CV3.js";
-import "./chunk-T4FMK5GN.js";
+import "./chunk-7IFPXSSJ.js";
+import "./chunk-IXA5PMXC.js";
+import "./chunk-KGU437HZ.js";
 import "./chunk-QETF6ILG.js";
-import "./chunk-IY2AW5F3.js";
+import "./chunk-JTFDOA2P.js";
 import "./chunk-WYDVQOBL.js";
 import "./chunk-JGOP4GCK.js";
 import "./chunk-UACZUFIA.js";

package/dist/chunks/{apps-6PAXKTB5.js → apps-KSZRA7Y2.js}

@@ -11,12 +11,12 @@ import {
   pollDeploymentLogs,
   resolveAppTarget
 } from "./chunk-J2REM7LE.js";
-import "./chunk-64LYEFLR.js";
+import "./chunk-LEL5AQJU.js";
 import {
   resolveBaseUrl,
   resolvePublicApiBaseUrl
 } from "./chunk-SMNFI2FU.js";
-import "./chunk-GMX47RLP.js";
+import "./chunk-YDH34BGG.js";
 import "./chunk-K4JEWEJQ.js";
 import "./chunk-JGOP4GCK.js";
 import {

package/dist/chunks/{chunk-MBF44RYK.js → chunk-66KQLYSH.js}

@@ -1,7 +1,7 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   now
-} from "./chunk-FYB6ELFM.js";
+} from "./chunk-7IFPXSSJ.js";
 
 // ../server/src/workspace/workspace-command.ts
 import { spawn, spawnSync } from "node:child_process";

package/dist/chunks/{chunk-KMBJLBQH.js → chunk-6FKBOGA4.js}

@@ -28,7 +28,7 @@ import {
   compareSemver,
   fetchLatestNpmVersion,
   getInstalledCliVersion
-} from "./chunk-GMX47RLP.js";
+} from "./chunk-YDH34BGG.js";
 import {
   checkOpenPondApiHealth,
   createHeadlessApps,

package/dist/chunks/{chunk-FYB6ELFM.js → chunk-7IFPXSSJ.js}

@@ -3,7 +3,7 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 // ../server/src/constants.ts
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 17874;
-var VERSION = "0.0.62";
+var VERSION = "0.0.63";
 var HOSTED_CHAT_SYSTEM_PROMPT = "You are OpenPond Chat. Respond in the user's language. If the user's latest message is language-neutral, ambiguous, or only a short test, respond in English. Be concise and directly answer the latest request. Do not use emojis. Use Markdown when it improves scanability. If you emit reasoning or thinking content, keep it sparse and user-readable: at most one short sentence for major progress, decisions, or blockers. Omit reasoning for routine searches, reads, tool calls, and obvious next steps. Do not restate the user request, narrate every action, or include code blocks, code excerpts, diffs, raw tool payloads, or markdown examples in reasoning. Put necessary code or exact snippets only in the final assistant answer. When the user asks to show or preview an image that is available as a workspace path or signed image URL, use Markdown image syntax like ![description](path-or-url) instead of a bare path or raw HTML. For workspace-backed answers, use a Codex-style shape: brief outcome first, then Changed Files if files changed, then Verification if checks ran. End with a concise final answer that summarizes the result and verification when relevant. Do not mention raw tool JSON, internal repo paths, or origin/remote URLs unless the user explicitly asks for them or they are necessary to explain a git/deploy failure.";
 var APP_PREFERENCES_CACHE_TYPE = "app_preferences";
 var APP_PREFERENCES_CACHE_KEY = "global";

package/dist/chunks/{chunk-6JT34APP.js → chunk-7UVEB2AZ.js}

@@ -6,11 +6,11 @@ import {
   DEFAULT_HOST,
   DEFAULT_PORT,
   parseListen
-} from "./chunk-FYB6ELFM.js";
+} from "./chunk-7IFPXSSJ.js";
 import {
   getBundledRuntimeVersion,
   openUrlWithSystemBrowser
-} from "./chunk-BFAL2CV3.js";
+} from "./chunk-IXA5PMXC.js";
 
 // ../server/src/cli.ts
 import { existsSync } from "node:fs";

package/dist/chunks/{chunk-BFAL2CV3.js → chunk-IXA5PMXC.js}

@@ -12,7 +12,7 @@ import {
   saveConfig,
   saveProfileApiKey,
   setActiveProfile
-} from "./chunk-T4FMK5GN.js";
+} from "./chunk-KGU437HZ.js";
 import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL,

package/dist/chunks/{chunk-IY2AW5F3.js → chunk-JTFDOA2P.js}

@@ -2869,10 +2869,22 @@ var HarnessRefinerCapabilitiesSchema = external_exports.object({
   agent: external_exports.boolean()
 }).strict();
 var SourceKindSchema = external_exports.enum(["memory", "instruction", "skill", "agent"]);
+var RefinerSourceFileSchema = external_exports.object({
+  path: external_exports.string().trim().min(1).max(2e3),
+  kind: SourceKindSchema,
+  content: external_exports.string().max(6e4),
+  loaded: external_exports.boolean()
+}).strict();
+var RefinerSourceCatalogEntrySchema = external_exports.object({
+  path: external_exports.string().trim().min(1).max(2e3),
+  kind: SourceKindSchema,
+  loaded: external_exports.boolean()
+}).strict();
 var LocalHarnessRefinerEvidenceSchema = external_exports.object({
   capabilities: HarnessRefinerCapabilitiesSchema,
   trigger: external_exports.record(external_exports.string(), external_exports.unknown()),
   observations: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).max(20),
+  admissibleEvidenceIds: external_exports.array(external_exports.string().trim().min(1).max(2e3)).max(1e4),
   reviewPacket: external_exports.object({
     currentTurn: external_exports.object({
       id: external_exports.string().trim().min(1).max(2e3),
@@ -2908,17 +2920,15 @@ var LocalHarnessRefinerEvidenceSchema = external_exports.object({
       timelineTruncated: external_exports.boolean()
     }).strict()
   }).strict(),
-  sourceFiles: external_exports.array(external_exports.object({
-    path: external_exports.string().trim().min(1).max(2e3),
-    kind: SourceKindSchema,
-    content: external_exports.string().max(6e4),
-    loaded: external_exports.boolean()
-  }).strict()).max(100),
-  sourceCatalog: external_exports.array(external_exports.object({
-    path: external_exports.string().trim().min(1).max(2e3),
-    kind: SourceKindSchema,
-    loaded: external_exports.boolean()
-  }).strict()).max(1e3),
+  runtimeActivation: external_exports.object({
+    admittedRelease: ImmutableReleaseRefSchema,
+    currentRelease: ImmutableReleaseRefSchema,
+    rebasedOntoCurrent: external_exports.boolean(),
+    admittedSourceFiles: external_exports.array(RefinerSourceFileSchema).max(100),
+    admittedSourceCatalog: external_exports.array(RefinerSourceCatalogEntrySchema).max(1e3)
+  }).strict(),
+  sourceFiles: external_exports.array(RefinerSourceFileSchema).max(100),
+  sourceCatalog: external_exports.array(RefinerSourceCatalogEntrySchema).max(1e3),
   additionalEvidence: external_exports.unknown().nullable().optional()
 }).strict();
 var DEFAULT_REFINER_TIMEOUT_MS = 6e4;
@@ -2953,6 +2963,7 @@ async function authorLocalHarnessRefinementWithModel(input) {
             "Reject invented recurrence, unsupported evidence references, material counterevidence, unavailable capability layers, task-specific or benchmark content, inferred memory, broad instructions, and workarounds for runtime, product, taskset, or grader defects.",
             "Do not reject a concise correction merely because the deterministic failure appeared once when the mechanism and reusable prevention are clear.",
             "For adaptation cohorts, reject drafts that add work instead of removing the repeated foreground-token cost while preserving quality.",
+            `Copy supportingEvidenceIds only from this exact list: ${JSON.stringify(evidence2.admissibleEvidenceIds)}.`,
             ...draftAdmissionIssues.length ? [`The draft also failed deterministic admission: ${draftAdmissionIssues.join("; ")}. Correct it or return no_action.`] : [],
             draft.decision === "no_action" ? "Return no_action only if you can identify no concrete reusable prevention rule in the supplied recovery evidence. Otherwise return the smallest valid route or proposal." : "Return the complete final JSON decision. Use no_action or route when the proposed Harness edit does not survive this critique."
           ].join("\n")
@@ -3024,10 +3035,12 @@ function refinerMessages(evidence2) {
         "A taskset grade proves only the measured outcome. It does not prove that the root owner is the Harness rather than runtime, product, fixture, grader, taskset, or model behavior.",
         "Optimize future work, not the completed turn. A repeated avoidable strategy is strong evidence, but one high-confidence deterministic failure may justify a small validated correction when the failure mechanism and reusable prevention are both clear. Recurrence strengthens confidence; it is not universally required.",
         "Recovered internal mistakes are not automatically ordinary successful work. A concrete API mismatch, incompatible dependency or format, or repeated command construction error can justify a narrow preventive skill or prompt correction when the trace shows how to avoid it next time.",
+        "runtimeActivation is authoritative about activation timing. admittedSourceFiles describe the exact released source available to the reviewed turn. sourceFiles and sourceCatalog describe the current editable release. When rebasedOntoCurrent is true, do not claim a current-only instruction was loaded by the reviewed turn.",
         "When the supplied trace shows that the model violated an already-loaded Harness instruction before recovering, the instruction's existence is not counterevidence. Treat that as evidence that its current wording, placement, or operational form was ineffective. Evaluate the smallest non-duplicative change that makes the rule actionable at the decision point, such as a concise preflight or checklist. Do not merely restate the existing rule.",
+        "For command, API, or structured-output construction failures, prefer an observable invariant over a vague reminder: name the forbidden combination precisely, state where it is forbidden, remove ambiguous qualifiers, and include one valid alternative when the evidence proves it. A post-activation recurrence should strengthen the operational form rather than duplicate the same wording in another file.",
         crossRunCandidate ? "This is a bounded cross-Work candidate continuation. Verify the supplied candidate, review, authorization, admitted release, independent occurrences, and counterevidence. Use recurrent_independent only; do not reinterpret unrelated wording as recurrence." : "This is an immediate completed-turn review, not an unbounded cross-Work archive review. Use only supplied observations and priorIncidents. Defer ambiguous recurrence to recurring-pattern review.",
         "Every route or proposal must declare evidenceBasis. Use single_deterministic only when a supplied incident exposes an observed deterministic mechanism and reusable prevention rule with no material counterevidence. Use recurrent_independent only for at least two materially independent supplied incidents; similar wording, topic, tool name, or artifact family is not independence.",
-        "supportingEvidenceIds must name actual supplied observation or prior-incident IDs. List material counterevidence explicitly. Never invent recurrence or omit contradictory supplied evidence.",
+        "supportingEvidenceIds must copy exact values from admissibleEvidenceIds. Do not synthesize labels from timeline sequences, event names, tools, or descriptions. List material counterevidence explicitly. Never invent recurrence or omit contradictory supplied evidence.",
         "Use no_action for ordinary successful work, conversation-specific facts, or insufficient evidence. High token use alone is not a reason to edit the Harness.",
         "Use route whenever a runtime, product, taskset, or training defect materially prevented the requested outcome. Routing records ownership; it does not blame the agent and does not require recurrence. A good fallback, transparent disclosure, or likely transient outage does not erase the external defect.",
         "For a Harness proposal, encode only the reusable root behavior. Do not copy subject matter, named entities, business facts, requested artifact content, benchmark wording, secrets, raw user data, or transient paths.",
@@ -3098,7 +3111,10 @@ function decisionAdmissionIssues(decision2, evidence2) {
   return issues;
 }
 function suppliedEvidenceIds(evidence2) {
-  const ids = /* @__PURE__ */ new Set([evidence2.reviewPacket.currentTurn.id]);
+  const ids = /* @__PURE__ */ new Set([
+    evidence2.reviewPacket.currentTurn.id,
+    ...evidence2.admissibleEvidenceIds
+  ]);
   for (const item of evidence2.observations)
     addRecordId(ids, item);
   for (const item of evidence2.reviewPacket.priorIncidents)

package/dist/chunks/{chunk-T4FMK5GN.js → chunk-KGU437HZ.js}

@@ -15,7 +15,7 @@ import {
   ToolDeclarationSchema,
   createHarnessAdvanceReceipt,
   validateConnectedAppToolCallRequest
-} from "./chunk-IY2AW5F3.js";
+} from "./chunk-JTFDOA2P.js";
 import {
   external_exports,
   yaml

package/dist/chunks/{chunk-64LYEFLR.js → chunk-LEL5AQJU.js}

@@ -4,7 +4,7 @@ import {
   getAnyCliOptionKind,
   getCliCommandDefinition,
   getCliOptionKind
-} from "./chunk-GMX47RLP.js";
+} from "./chunk-YDH34BGG.js";
 import {
   parseJsonOption
 } from "./chunk-MUMPWI4O.js";

package/dist/chunks/{chunk-4NHAH3MT.js → chunk-V2CTXKS2.js}

@@ -11,7 +11,7 @@ import {
   truncatePatch,
   uniqueSortedPaths,
   workspaceImageContentType
-} from "./chunk-MBF44RYK.js";
+} from "./chunk-66KQLYSH.js";
 import {
   AGENT_PROTOCOL_VERSION,
   AGENT_RPC_METHODS,
@@ -35,13 +35,13 @@ import {
   event,
   now,
   textFromUnknown
-} from "./chunk-FYB6ELFM.js";
+} from "./chunk-7IFPXSSJ.js";
 import {
   getBundledRuntimeVersion,
   loadOpenPondAccountContext,
   loadOpenPondHostedModels,
   streamOpenPondHostedChatTurn
-} from "./chunk-BFAL2CV3.js";
+} from "./chunk-IXA5PMXC.js";
 import {
   AppPreferencesSchema,
   ApplyCreateImproveRunActionRequestSchema,
@@ -162,7 +162,7 @@ import {
   runProfileSkillCommand,
   sidebarFileBookmarkId,
   workOutputMediaTypesCompatible
-} from "./chunk-T4FMK5GN.js";
+} from "./chunk-KGU437HZ.js";
 import {
   PROJECT_ACTION_CONFIG_PATH,
   createLocalActionRunner,
@@ -271,7 +271,7 @@ import {
   uniqueEventRefs,
   validateConnectedAppProviderOperationRequest,
   verifyRequiredOutputs
-} from "./chunk-IY2AW5F3.js";
+} from "./chunk-JTFDOA2P.js";
 import {
   external_exports
 } from "./chunk-WYDVQOBL.js";
@@ -7915,7 +7915,6 @@ async function loadLocalHarnessRuntimeFromRelease(input) {
     }))
   );
   const skills = [];
-  const skillContexts = [];
   const readers = /* @__PURE__ */ new Map();
   for (const asset3 of release.agentSnapshot.skills) {
     const markdown = await readVerifiedAsset(sourceRoot, asset3.path, asset3.contentHash);
@@ -7942,11 +7941,6 @@ async function loadLocalHarnessRuntimeFromRelease(input) {
       resourceFiles
     };
     skills.push(skill);
-    skillContexts.push([
-      `Harness Skill (${asset3.path}, ${parsed.name}):`,
-      parsed.description,
-      parsed.body.trim()
-    ].filter(Boolean).join("\n"));
     readers.set(skill.name, async () => {
       const currentMarkdown = await readVerifiedAsset(sourceRoot, asset3.path, asset3.contentHash);
       const current = parseProfileSkillMarkdown(currentMarkdown);
@@ -7975,20 +7969,10 @@ async function loadLocalHarnessRuntimeFromRelease(input) {
       return read();
     } : null
   };
-  const agents = await Promise.all(
-    release.agentSnapshot.agents.map(async (asset3) => ({
-      path: asset3.path,
-      content: await readVerifiedAsset(sourceRoot, asset3.path, asset3.contentHash)
-    }))
-  );
   const instructionSections = instructions.sort((left, right) => left.path.localeCompare(right.path)).map(({ path: instructionPath, content }) => [
-    `Harness instruction (${instructionPath}):`,
+    `Active Harness instruction (${instructionPath}):`,
     content.trim()
   ].join("\n")).filter((content) => content.trim().length > 0);
-  const agentSections = agents.sort((left, right) => left.path.localeCompare(right.path)).map(({ path: agentPath, content }) => [
-    `Harness Agent (${agentPath}):`,
-    content.trim()
-  ].join("\n"));
   const capabilityReceipt = [
     "Harness capability receipt:",
     JSON.stringify({
@@ -8011,11 +7995,14 @@ async function loadLocalHarnessRuntimeFromRelease(input) {
     })
   ].join("\n");
   const instructionContext = [
-    ...instructionSections,
-    ...skillContexts.sort(),
-    ...agentSections,
-    capabilityReceipt
-  ].filter((content) => content.trim().length > 0).join("\n\n");
+    capabilityReceipt,
+    instructionSections.length > 0 ? [
+      "Active Harness preflight:",
+      "Apply the following released instructions when planning work and immediately before every tool call.",
+      "Preflight each call: (1) identify any active instruction that matches the planned operation, (2) inspect the exact tool arguments for a forbidden pattern, and (3) rewrite the call before sending it when a pattern matches. Compliance is required even when the prohibited call might still succeed.",
+      ...instructionSections
+    ].join("\n\n") : null
+  ].filter((content) => Boolean(content?.trim())).join("\n\n");
   return { workspace, release, instructionContext, skillRuntime };
 }
 async function readVerifiedAsset(sourceRoot, relativePath, expectedHash) {
@@ -8676,8 +8663,10 @@ async function loadExactObservations(store, workspaceId, trigger) {
     return observation;
   });
 }
-async function readBoundedRefinerSource(bundlePath, trigger) {
+async function readBoundedRefinerSource(bundlePath, trigger, options = {}) {
   const loadedSkillNames = loadedSkillNamesFromTrigger(trigger);
+  const sourceWasAdmitted = options.forceUnloaded !== true;
+  const wasLoaded = (kind, filePath) => sourceWasAdmitted && (kind === "instruction" || kind === "skill" && loadedSkillNames.has(skillNameFromPath(filePath)));
   const sourceRoot = path7.resolve(bundlePath, "source");
   const manifest = HarnessSourceManifestSchema.parse(
     JSON.parse(await fs6.readFile(path7.join(sourceRoot, "harness.json"), "utf8"))
@@ -8689,11 +8678,11 @@ async function readBoundedRefinerSource(bundlePath, trigger) {
   ).map((file) => ({
     path: file.path,
     kind: file.kind,
-    loaded: file.kind === "skill" && loadedSkillNames.has(skillNameFromPath(file.path))
+    loaded: wasLoaded(file.kind, file.path)
   }));
   const rankedFiles = manifest.files.slice().sort((left, right) => {
-    const leftLoaded = left.kind === "skill" && loadedSkillNames.has(skillNameFromPath(left.path));
-    const rightLoaded = right.kind === "skill" && loadedSkillNames.has(skillNameFromPath(right.path));
+    const leftLoaded = ["instruction", "skill", "agent"].includes(left.kind) && wasLoaded(left.kind, left.path);
+    const rightLoaded = ["instruction", "skill", "agent"].includes(right.kind) && wasLoaded(right.kind, right.path);
     if (leftLoaded !== rightLoaded) return leftLoaded ? -1 : 1;
     const rank = (kind) => kind === "instruction" ? 0 : kind === "skill" ? 1 : 2;
     return rank(left.kind) - rank(right.kind) || left.path.localeCompare(right.path);
@@ -8711,7 +8700,7 @@ async function readBoundedRefinerSource(bundlePath, trigger) {
       path: file.path,
       kind: file.kind,
       content: bytes.toString("utf8"),
-      loaded: file.kind === "skill" && loadedSkillNames.has(skillNameFromPath(file.path))
+      loaded: wasLoaded(file.kind, file.path)
     });
     remaining -= bytes.byteLength;
   }
@@ -9312,6 +9301,33 @@ function withoutHash(candidate) {
   return content;
 }
 
+// ../server/src/harness/local-harness-refiner-release-context.ts
+async function loadRefinerReleaseContext(input) {
+  const effectiveReleaseRef = input.rebasedOntoCurrent ? input.workspace.currentChannel.release : input.overlay.baseHarnessRelease;
+  if (!effectiveReleaseRef) {
+    throw new Error("Queued Refiner trigger references a Harness workspace without a current release.");
+  }
+  const release = await input.store.getHarnessReleaseRecord(
+    effectiveReleaseRef.contentHash
+  );
+  if (!release || release.harnessRelease.id !== effectiveReleaseRef.id || release.workspaceId !== input.workspace.id) {
+    throw new Error("Queued Refiner trigger references an unavailable effective Harness release.");
+  }
+  const source = await readBoundedRefinerSource(
+    release.bundlePath,
+    input.trigger,
+    { forceUnloaded: input.rebasedOntoCurrent }
+  );
+  const admittedRelease = input.rebasedOntoCurrent ? await input.store.getHarnessReleaseRecord(
+    input.overlay.baseHarnessRelease.contentHash
+  ) : release;
+  if (!admittedRelease || admittedRelease.harnessRelease.id !== input.overlay.baseHarnessRelease.id || admittedRelease.workspaceId !== input.workspace.id) {
+    throw new Error("Queued Refiner trigger references an unavailable admitted Harness release.");
+  }
+  const admittedSource = input.rebasedOntoCurrent ? await readBoundedRefinerSource(admittedRelease.bundlePath, input.trigger) : source;
+  return { admittedSource, effectiveReleaseRef, release, source };
+}
+
 // ../server/src/harness/local-harness-refiner-worker-support.ts
 async function findRefinerOutcome(store, workspaceId, trigger) {
   const outcomes = await store.listHarnessImprovementArtifacts(
@@ -9429,20 +9445,13 @@ async function executeLocalHarnessRefinerWorker(input) {
       now: input.now
     });
   }
-  const effectiveReleaseRef = rebasedOntoCurrent ? workspace.currentChannel.release : overlay.baseHarnessRelease;
-  if (!effectiveReleaseRef) {
-    throw new Error("Queued Refiner trigger references a Harness workspace without a current release.");
-  }
-  const release = await input.store.getHarnessReleaseRecord(
-    effectiveReleaseRef.contentHash
-  );
-  if (!release || release.harnessRelease.id !== effectiveReleaseRef.id || release.workspaceId !== workspace.id) {
-    throw new Error("Queued Refiner trigger references an unavailable effective Harness release.");
-  }
-  const source = await readBoundedRefinerSource(
-    release.bundlePath,
-    trigger
-  );
+  const { admittedSource, effectiveReleaseRef, release, source } = await loadRefinerReleaseContext({
+    store: input.store,
+    workspace,
+    overlay,
+    trigger,
+    rebasedOntoCurrent
+  });
   const memorySource = (await input.store.listHarnessMemories(workspace.id)).slice(0, 100).map((entry) => ({
     path: `memory/${entry.key}`,
     kind: "memory",
@@ -9464,11 +9473,25 @@ async function executeLocalHarnessRefinerWorker(input) {
     skill: true,
     agent: false
   };
+  const admissibleEvidenceIds = [
+    ...observations.map((observation) => observation.id),
+    ...boundedContext.reviewPacket.priorIncidents.flatMap(
+      (incident) => typeof incident.id === "string" && incident.id.trim() ? [incident.id.trim()] : []
+    )
+  ];
   const refinerEvidence = {
     capabilities,
     trigger: boundedTriggerEvidence(trigger),
     observations: observations.map(boundedObservationEvidence),
+    admissibleEvidenceIds,
     reviewPacket: boundedContext.reviewPacket,
+    runtimeActivation: {
+      admittedRelease: overlay.baseHarnessRelease,
+      currentRelease: effectiveReleaseRef,
+      rebasedOntoCurrent,
+      admittedSourceFiles: admittedSource.files,
+      admittedSourceCatalog: admittedSource.catalog
+    },
     sourceFiles: source.files,
     sourceCatalog: source.catalog,
     additionalEvidence: input.additionalEvidence ?? null
@@ -45294,7 +45317,7 @@ function uniqueEvidence2(run, evidence) {
 }
 async function verifyAppliedProfileCommit(input) {
   const command = input.command ?? (async (name, args, cwd, env) => {
-    const { runWorkspaceCommand } = await import("./workspaces-QKADU2A6.js");
+    const { runWorkspaceCommand } = await import("./workspaces-CYBR37US.js");
     return runWorkspaceCommand(name, args, cwd, env);
   });
   const result = await command("git", ["rev-parse", "HEAD"], input.repoPath);