owlrunkit 0.14.0 → 0.15.0

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.15.0
+
+- Makes detected npm launchers resolve to absolute regular files that Formal
+  verification can execute without weakening symlink rejection.
+- Adds workspace-aware `apps/*` and `packages/*` profile candidates with exact
+  workspace script commands.
+- Expands read-only runtime-isolation diagnostics across common formatters,
+  linters, and explicitly broad test collectors.
+- Preserves rejected verification preflights as append-only execution evidence
+  and persists non-accepted finalize outcomes with their request binding.
+- Consumes completed adoption/profile facts in doctor and inspect guidance only
+  when the launcher and exact local registry bindings are still safe.
+- Keeps Contract v0.2, 0.13/0.14 configurations, profiles, historical
+  executions, receipts, and verifier Core identities readable; repeated
+  upgrades write exclusive sequenced ConfigV2 Core-refresh receipts.
+- Refuses Core or process-wide Codex Skill upgrades before mutation when any
+  explicitly enrolled project has an active execution, writer lease,
+  ambiguous closeout, or invalid config.
+- Archives the exact prior Skill and project config bytes, adds receipt-bound
+  exact rollback, and adds an exact-Core active-fleet recovery path for
+  installations already drifted by an older unsafe replacement.
+- Runs registry pack/install/upgrade/rollback gates through npm owned by each
+  selected Node runtime and proves active work blocks upgrade before mutation
+  and rollback restores the exact prior Skill identity and config bytes.
+- Keeps OwlCoda CLI `0.15.31` unchanged and grants no Git, publish, release, or
+  deploy authority.
+
 ## 0.14.0
 
 - Adds ordinary `--help` and `--version`, read-only `doctor`, exact official

package/README.md

@@ -11,7 +11,7 @@ release authority.
 ## Install
 
 ```bash
-npm install --save-exact owlrunkit@0.14.0
+npm install --save-exact owlrunkit@0.15.0
 ```
 
 Check the ordinary CLI surface, then initialize a project:
@@ -22,7 +22,7 @@ owlrunkit --version
 owlrunkit init --workspace /absolute/path/to/project
 owlrunkit doctor --workspace /absolute/path/to/project
 owlrunkit profiles detect --workspace /absolute/path/to/project --dry-run
-owlrunkit adopt --workspace /absolute/path/to/project --exact owlrunkit@0.14.0
+owlrunkit adopt --workspace /absolute/path/to/project --exact owlrunkit@0.15.0
 ```
 
 `doctor` is read-only and distinguishes offline/DNS timeout, registry
@@ -32,6 +32,50 @@ detection is deterministic and dry-run only; use `profiles validate` and
 evidence only after the exact installed package and lockfile match the official
 npm registry release.
 
+Core 0.15 keeps Contract v0.2 and all 0.13/0.14 project artifact schemas
+readable. `init` refreshes an older ConfigV2 Core binding with an append-only
+migration receipt only when the project has no active execution, active writer
+lease, or ambiguous control state. Otherwise the upgrade exits before changing
+the config or writing migration evidence. Legal refreshes preserve profiles,
+executions, receipts, and adoption evidence byte-for-byte. Existing profiles
+are never rewritten automatically; a fresh `profiles detect --dry-run` supplies
+safer, workspace-aware candidates for human review.
+Repeated Core refreshes create sequenced receipts without replacing an earlier
+migration event, and rejected Formal finalize gates retain their request-bound
+reason as append-only evidence.
+
+## Updating the process-wide Codex Skill
+
+Do not replace a shared installed Skill while any consuming project is active.
+For a changed Skill manifest, enumerate the complete consuming fleet with
+repeated `--workspace` arguments:
+
+```bash
+node ./scripts/runkit-contract/install-codex-skill.mjs install \
+  --repository /absolute/path/to/owlrunkit-package \
+  --target /absolute/path/to/installed/owlcoda-runkit \
+  --archive /absolute/path/to/skill-archives \
+  --workspace /absolute/project-a \
+  --workspace /absolute/project-b
+```
+
+The update is refused before global or project mutation if any listed project
+is active or invalid. A successful update records the exact prior Skill
+identity and each original project config in an append-only receipt. Restore
+that exact state with:
+
+```bash
+node ./scripts/runkit-contract/install-codex-skill.mjs restore \
+  --target /absolute/path/to/installed/owlcoda-runkit \
+  --archive /absolute/path/to/skill-archives \
+  --receipt /absolute/path/to/skill-upgrade-receipt.json
+```
+
+`recover-active` is reserved for a fleet already drifted by an older unsafe
+replacement. It accepts only an archived Skill whose Core identity exactly
+matches every affected config and active execution pin, leaves all project
+bytes untouched, and writes a recovery receipt.
+
 Use Quick Verification for one low-risk source-bound command that needs a
 reusable receipt but no writer lease or Formal acceptance. Use Formal Delivery
 for multi-writer, long-running, migration, integration, release, production,

package/integrations/codex/skills/owlcoda-runkit/SKILL.md

@@ -7,8 +7,8 @@ description: Run receipt-backed, project-owned software execution with OwlCoda R
 
 Use the bundled deterministic Core to coordinate work through project artifacts rather than chat memory. Require Node.js 20 or later.
 
-Current release: standalone `owlrunkit@0.14.0`, bundling Contract `0.2` and
-Core `0.14.0`. The root `owlcoda` package has a separate version lifecycle.
+Current release: standalone `owlrunkit@0.15.0`, bundling Contract `0.2` and
+Core `0.15.0`. The root `owlcoda` package has a separate version lifecycle.
 
 The session is an execution interface. Project artifacts are the system of record.
 
@@ -111,17 +111,55 @@ node "$RUNKIT_PACKAGE_ROOT/scripts/runkit-contract/install-codex-skill.mjs" \
 
 node "$RUNKIT_PACKAGE_ROOT/scripts/runkit-contract/install-codex-skill.mjs" \
   install --repository "$RUNKIT_PACKAGE_ROOT" \
-  --target "$RUNKIT_SKILL_TARGET" --archive "$RUNKIT_SKILL_ARCHIVE_ROOT"
+  --target "$RUNKIT_SKILL_TARGET" --archive "$RUNKIT_SKILL_ARCHIVE_ROOT" \
+  --workspace /absolute/project-a --workspace /absolute/project-b
 ```
 
 The install manifest binds every Skill, Core, contract and attest file.
-Unknown installed drift fails closed instead of being overwritten. An accepted
-receipt, ready-for-commit receipt, package publication, or valid install still
-does not grant Git, npm, release, deploy, or foreign-project authority.
+Unknown installed drift fails closed instead of being overwritten. A changed
+process-wide Skill requires an explicit fleet: pass every project that consumes
+that Skill as a repeated `--workspace`. The installer validates every project
+config and refuses the whole update before replacing the Skill or changing any
+project when one project has an active execution, an active writer lease,
+ambiguous control state, or invalid configuration. Omitting the fleet is an
+error; do not pass a partial fleet to bypass this guard.
+
+A successful update archives the exact prior Skill, migrates each inactive
+project, and writes an append-only upgrade receipt containing the prior Skill
+manifest identity and each prior ConfigV2 byte sequence. Use that receipt for
+an exact rollback:
 
-## Core v0.14 self-service onboarding
+```bash
+node "$RUNKIT_PACKAGE_ROOT/scripts/runkit-contract/install-codex-skill.mjs" \
+  restore --target "$RUNKIT_SKILL_TARGET" \
+  --archive "$RUNKIT_SKILL_ARCHIVE_ROOT" \
+  --receipt /absolute/path/to/skill-upgrade-receipt.json
+```
 
-The bundled Core is `0.14.0`. New users should not need internal module calls,
+If an older unsafe process-wide replacement already drifted a running fleet,
+do not run ordinary `install` or `restore`. Recover only an archived Skill whose
+embedded Core identity exactly matches every affected project config and active
+execution pin:
+
+```bash
+node "$RUNKIT_PACKAGE_ROOT/scripts/runkit-contract/install-codex-skill.mjs" \
+  recover-active --target "$RUNKIT_SKILL_TARGET" \
+  --archive "$RUNKIT_SKILL_ARCHIVE_ROOT" \
+  --archived-installation /absolute/path/to/exact-archived-skill \
+  --workspace /absolute/affected-project
+```
+
+Active recovery changes only the process-wide Skill installation. It preserves
+project config, execution, lease, receipt, and closeout bytes and writes an
+append-only recovery receipt. It refuses an approximate version match or a
+fleet with no matching active execution. An accepted receipt, ready-for-commit
+receipt, package publication, valid install, rollback, or recovery still does
+not grant Git, npm, release, deploy, or foreign-project authority.
+
+## Core v0.15 consolidated onboarding and compatibility
+
+Core v0.14 introduced self-service onboarding. The bundled Core is now
+`0.15.0`; new users should not need internal module calls,
 an external schema validator, or the full Formal lifecycle merely to understand
 whether a project can adopt RunKit.
 
@@ -132,7 +170,7 @@ owlrunkit doctor --workspace "$PROJECT_ROOT"
 owlrunkit profiles detect --workspace "$PROJECT_ROOT" --dry-run
 owlrunkit profiles validate --workspace "$PROJECT_ROOT"
 owlrunkit profiles impact --workspace "$PROJECT_ROOT" --changed path/to/file
-owlrunkit adopt --workspace "$PROJECT_ROOT" --exact owlrunkit@0.14.0
+owlrunkit adopt --workspace "$PROJECT_ROOT" --exact owlrunkit@0.15.0
 ```
 
 `doctor` and `profiles detect --dry-run` are read-only. Registry diagnostics use
@@ -141,16 +179,40 @@ failures, missing versions and local-install binding mismatches without
 printing credentials. Profile detection is deterministic evidence for a human
 decision; it does not write or overwrite project configuration.
 
-`adopt` accepts only an exact `owlrunkit@0.14.0` binding from the official npm
+`adopt` accepts only an exact `owlrunkit@0.15.0` binding from the official npm
 registry. It recomputes the registry and local install/lock facts, invokes the
 strict adoption evaluator, and writes typed project evidence only after an
 eligible result. Worktrees, `file:` dependencies, local tarballs, Git sources,
 workspace links and mutable tags remain ineligible.
 
-`init` and `inspect` expose an onboarding projection that points new users to
-`doctor`, dry-run profile detection, and then exact adoption or Formal start.
-This projection does not replace the Core recovery action and does not grant
-authority.
+Detected commands use canonical absolute regular-file launchers, including
+NVM-managed npm installs, so a detector result does not conflict with Formal
+symlink rejection. Workspace discovery understands safe literal and one-level
+`apps/*` / `packages/*` patterns and emits exact root-owned npm workspace
+commands. Detection remains dry-run only and never rewrites an existing
+profile.
+
+`doctor` warns when explicit broad formatter, linter, or test-collector
+commands can include `.owlcoda/runkit/`; it never edits ignore or tool
+configuration. `init` and `inspect` consume valid current-version adoption and
+profile facts only while the exact local registry binding remains intact and
+every launcher is Formal-safe; otherwise launcher review or adoption remains
+explicitly incomplete. The recovery action remains authoritative. A rejected
+Formal executable preflight or non-accepted finalize gate is preserved under
+the execution before the CLI returns the result.
+
+Contract v0.2 remains unchanged. Upgrading a 0.13 or 0.14 ConfigV2 project
+is allowed only while its RunKit control state is inactive and unambiguous. An
+active execution or writer lease refuses the upgrade before `config.json` or
+migration evidence changes. A legal refresh writes an exclusive sequenced
+Core-refresh migration receipt and changes only `config.json`; a repeated
+transition cannot replace its first receipt. Compatibility gates invoke npm
+through each selected Node runtime, prove active 0.13/0.14 work blocks 0.15
+before mutation, and prove upgrade-receipt rollback restores the exact prior
+Skill manifest and ConfigV2 bytes. Existing profiles, adoption evidence,
+executions, delivery packets, snapshots, verification receipts, and closeouts
+remain byte-identical and readable. Neither compatibility nor a completed
+onboarding projection grants authority.
 
 ## Choose the smallest assurance lane
 

package/integrations/codex/skills/owlcoda-runkit/assets/templates/config.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitConfigV2",
   "core": {
     "contractVersion": "0.2",
-    "coreVersion": "0.14.0",
+    "coreVersion": "0.15.0",
     "coreManifestSha256": "sha256:replace-with-installed-core-manifest",
     "coreSourceRef": "artifact:sha256:replace-with-content-addressed-source"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlrunkit",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Project-owned execution, evidence, verification, and recovery for coding agents.",
   "license": "GPL-3.0-or-later",
   "author": "yeemio <owlclaw@163.com>",

package/packages/attest/distribution-manifest-v1.json

@@ -36,6 +36,11 @@
     "sha256": "sha256:3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
   },
   "supportedProducerCoreIdentities": [
+    {
+      "contractVersion": "0.2",
+      "coreVersion": "0.15.0",
+      "coreManifestSha256": "sha256:06d7616c369b4b3ece3aca32f05c505d4b30781d3ca87a13bd8d7293c1491f64"
+    },
     {
       "contractVersion": "0.2",
       "coreVersion": "0.14.0",

package/packages/attest/src/quick.mjs

@@ -18,6 +18,11 @@ import { captureWorkspaceSnapshot } from "./workspace-snapshot.mjs";
 export { validQuickReceiptShape } from "./quick-receipt-contract.mjs";
 
 export const SUPPORTED_QUICK_CORE_IDENTITIES = Object.freeze([
+  {
+    contractVersion: "0.2",
+    coreVersion: "0.15.0",
+    coreManifestSha256: "sha256:06d7616c369b4b3ece3aca32f05c505d4b30781d3ca87a13bd8d7293c1491f64",
+  },
   {
     contractVersion: "0.2",
     coreVersion: "0.14.0",

package/registry-release-policy-v1.json

@@ -2,7 +2,7 @@
   "schemaVersion": "OwlCodaRunKitRegistryReleasePolicyV1",
   "status": "release_candidate_unpublished",
   "packageName": "owlrunkit",
-  "candidateVersion": "0.14.0",
+  "candidateVersion": "0.15.0",
   "registry": "https://registry.npmjs.org",
   "registryRequiredBeforeAdoption": true,
   "exactVersionRequired": true,

package/sbom.spdx.json

@@ -2,8 +2,8 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "owlrunkit-0.14.0",
-  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.14.0",
+  "name": "owlrunkit-0.15.0",
+  "documentNamespace": "https://owlcoda.com/spdx/owlrunkit/0.15.0",
   "creationInfo": {
     "created": "2026-07-29T00:00:00Z",
     "creators": [
@@ -14,8 +14,8 @@
     {
       "name": "owlrunkit",
       "SPDXID": "SPDXRef-Package-OwlRunKit",
-      "versionInfo": "0.14.0",
-      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.14.0.tgz",
+      "versionInfo": "0.15.0",
+      "downloadLocation": "https://registry.npmjs.org/owlrunkit/-/owlrunkit-0.15.0.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "GPL-3.0-or-later",
       "licenseDeclared": "GPL-3.0-or-later",
@@ -24,7 +24,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/owlrunkit@0.14.0"
+          "referenceLocator": "pkg:npm/owlrunkit@0.15.0"
         }
       ]
     }

package/scripts/runkit-contract/core-contract.mjs

@@ -1,8 +1,10 @@
 import { createHash } from "node:crypto";
 import {
   existsSync,
+  lstatSync,
   mkdirSync,
   readFileSync,
+  readdirSync,
   realpathSync,
   renameSync,
   rmSync,
@@ -12,7 +14,7 @@ import { isAbsolute, relative, resolve, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 export const CONTRACT_VERSION = "0.2";
-export const CORE_VERSION = "0.14.0";
+export const CORE_VERSION = "0.15.0";
 export const RUNTIME_ROOT = ".owlcoda/runkit";
 
 const CORE_FILES = [
@@ -72,6 +74,8 @@ const CORE_FILES = [
   "schemas/visual-smoke-request-v1.schema.json",
   "schemas/visual-smoke-result-v1.schema.json",
   "schemas/verification-context-v1.schema.json",
+  "schemas/verification-finalize-attempt-v1.schema.json",
+  "schemas/verification-preflight-v1.schema.json",
   "schemas/verification-plan-v1.schema.json",
   "schemas/verification-receipt-v2.schema.json",
   "schemas/verify-plan-request-v1.schema.json",
@@ -136,6 +140,22 @@ function migrationReceiptName(migration, fromCore, toCore) {
   return `config-v02-core-refresh-${from}-to-${to}.json`;
 }
 
+function writeMigrationReceiptAppendOnly(receiptsRoot, baseName, receipt) {
+  const bytes = `${JSON.stringify(receipt, null, 2)}\n`;
+  const stem = baseName.slice(0, -".json".length);
+  for (let attempt = 1; ; attempt += 1) {
+    const receiptName = attempt === 1
+      ? baseName
+      : `${stem}-attempt-${String(attempt).padStart(3, "0")}.json`;
+    try {
+      writeFileSync(resolve(receiptsRoot, receiptName), bytes, { flag: "wx" });
+      return receiptName;
+    } catch (error) {
+      if (error?.code !== "EEXIST") throw error;
+    }
+  }
+}
+
 function migrateProjectConfig({ runtimeRoot, configPath, config, migration }) {
   validateCoreIdentity(config.core);
   const next = projectConfig();
@@ -150,8 +170,11 @@ function migrateProjectConfig({ runtimeRoot, configPath, config, migration }) {
   };
   const receiptsRoot = resolve(runtimeRoot, "config-migration-receipts");
   mkdirSync(receiptsRoot, { recursive: true });
-  const receiptName = migrationReceiptName(migration, config.core, next.core);
-  atomicWriteJson(resolve(receiptsRoot, receiptName), receipt);
+  const receiptName = writeMigrationReceiptAppendOnly(
+    receiptsRoot,
+    migrationReceiptName(migration, config.core, next.core),
+    receipt,
+  );
   atomicWriteJson(configPath, next);
   return `${RUNTIME_ROOT}/config-migration-receipts/${receiptName}`;
 }
@@ -258,6 +281,98 @@ export function validateProjectConfigV2(config) {
   }
 }
 
+export function inspectProjectUpgradeSafety({ workspaceRoot } = {}) {
+  if (typeof workspaceRoot !== "string" || workspaceRoot.length === 0) {
+    throw new Error("workspaceRoot is required.");
+  }
+  const root = realpathSync(workspaceRoot);
+  const executionsRoot = resolve(root, RUNTIME_ROOT, "executions");
+  if (!existsSync(executionsRoot)) {
+    return {
+      status: "safe",
+      activeRunIds: [],
+      activeLeaseIds: [],
+      issues: [],
+    };
+  }
+  const executionsStat = lstatSync(executionsRoot);
+  if (executionsStat.isSymbolicLink() || !executionsStat.isDirectory()) {
+    return {
+      status: "unsafe",
+      activeRunIds: [],
+      activeLeaseIds: [],
+      issues: ["RunKit executions root must be a regular directory."],
+    };
+  }
+  const activeRunIds = [];
+  const activeLeaseIds = [];
+  const issues = [];
+  const entries = readdirSync(executionsRoot, { withFileTypes: true })
+    .sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+  for (const entry of entries) {
+    if (entry.isSymbolicLink()) {
+      issues.push(`Execution directory must not be a symlink: ${entry.name}`);
+      continue;
+    }
+    if (!entry.isDirectory()) continue;
+    const executionRoot = resolve(executionsRoot, entry.name);
+    const closeoutPath = resolve(executionRoot, "closeout-receipt.json");
+    if (!existsSync(closeoutPath)) {
+      activeRunIds.push(entry.name);
+    } else {
+      const closeoutStat = lstatSync(closeoutPath);
+      if (closeoutStat.isSymbolicLink() || !closeoutStat.isFile()) {
+        issues.push(`Closeout receipt must be a regular file: ${entry.name}`);
+      } else {
+        try {
+          const closeout = JSON.parse(readFileSync(closeoutPath, "utf8"));
+          if (closeout?.artifact?.payload?.runId !== entry.name) {
+            issues.push(`Closeout receipt runId mismatch: ${entry.name}`);
+          }
+        } catch {
+          issues.push(`Closeout receipt is invalid JSON: ${entry.name}`);
+        }
+      }
+    }
+    const leasesRoot = resolve(executionRoot, "leases");
+    if (!existsSync(leasesRoot)) continue;
+    const leasesStat = lstatSync(leasesRoot);
+    if (leasesStat.isSymbolicLink() || !leasesStat.isDirectory()) {
+      issues.push(`Lease directory must be a regular directory: ${entry.name}`);
+      continue;
+    }
+    const leaseEntries = readdirSync(leasesRoot, { withFileTypes: true })
+      .sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+    for (const leaseEntry of leaseEntries) {
+      if (!leaseEntry.name.endsWith(".json")) continue;
+      if (leaseEntry.isSymbolicLink() || !leaseEntry.isFile()) {
+        issues.push(`Lease artifact must be a regular file: ${entry.name}/${leaseEntry.name}`);
+        continue;
+      }
+      try {
+        const lease = JSON.parse(readFileSync(resolve(leasesRoot, leaseEntry.name), "utf8"));
+        if (lease.state === "active") {
+          activeLeaseIds.push(`${entry.name}:${lease.workItemId ?? leaseEntry.name}`);
+        } else if (lease.state !== "released") {
+          issues.push(`Lease state is invalid: ${entry.name}/${leaseEntry.name}`);
+        }
+      } catch {
+        issues.push(`Lease artifact is invalid JSON: ${entry.name}/${leaseEntry.name}`);
+      }
+    }
+  }
+  return {
+    status: activeRunIds.length === 0
+      && activeLeaseIds.length === 0
+      && issues.length === 0
+      ? "safe"
+      : "unsafe",
+    activeRunIds,
+    activeLeaseIds,
+    issues,
+  };
+}
+
 function validateProducer(producer) {
   if (!isRecord(producer) || typeof producer.adapterKind !== "string" || typeof producer.adapterVersion !== "string") {
     throw new Error("Producer requires adapterKind and adapterVersion.");
@@ -340,10 +455,10 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
   const runtimeRoot = resolve(root, RUNTIME_ROOT);
   const remainder = relative(root, runtimeRoot);
   if (remainder.startsWith("..") || isAbsolute(remainder)) throw new Error("Runtime root escapes the workspace.");
-  mkdirSync(resolve(runtimeRoot, "executions"), { recursive: true });
   const configPath = resolve(runtimeRoot, "config.json");
   const profilesPath = resolve(runtimeRoot, "profiles.json");
   if (!existsSync(configPath)) {
+    mkdirSync(resolve(runtimeRoot, "executions"), { recursive: true });
     atomicWriteJson(configPath, projectConfig());
   } else {
     const config = JSON.parse(readFileSync(configPath, "utf8"));
@@ -355,6 +470,16 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
     if (config.schemaVersion === "OwlCodaRunKitConfigV2" && currentGate.status === "valid") {
       // The project already points at this exact Core identity.
     } else if (config.schemaVersion === "OwlCodaRunKitConfigV1" && config.core?.contractVersion === "0.1") {
+      const safety = inspectProjectUpgradeSafety({ workspaceRoot: root });
+      if (safety.status !== "safe") {
+        return {
+          ...safety,
+          status: "upgrade_blocked_active_execution",
+          exitCode: 2,
+          runtimeRoot: RUNTIME_ROOT,
+          core: current,
+        };
+      }
       const migrationReceipt = migrateProjectConfig({
         runtimeRoot,
         configPath,
@@ -366,6 +491,16 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
       }
       return { status: "upgraded", exitCode: 0, runtimeRoot: RUNTIME_ROOT, core: current, migrationReceipt };
     } else if (config.schemaVersion === "OwlCodaRunKitConfigV2" && config.core?.contractVersion === CONTRACT_VERSION) {
+      const safety = inspectProjectUpgradeSafety({ workspaceRoot: root });
+      if (safety.status !== "safe") {
+        return {
+          ...safety,
+          status: "upgrade_blocked_active_execution",
+          exitCode: 2,
+          runtimeRoot: RUNTIME_ROOT,
+          core: current,
+        };
+      }
       const migrationReceipt = migrateProjectConfig({
         runtimeRoot,
         configPath,
@@ -380,6 +515,7 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
       throw new Error(`Unsupported project config migration: ${config.schemaVersion ?? "missing schemaVersion"}.`);
     }
   }
+  mkdirSync(resolve(runtimeRoot, "executions"), { recursive: true });
   if (!existsSync(profilesPath)) {
     writeFileSync(profilesPath, `${JSON.stringify({ schemaVersion: "OwlCodaRunKitProfilesV1", profiles: [] }, null, 2)}\n`);
   }