pi-daddy 0.22.0 → 0.23.0

package/CHANGELOG.md

@@ -12,6 +12,36 @@ the record of how the package got here and are worth keeping; they are not worth
 > the record of how the package arrived at what it does, and because the reasoning behind each one is
 > usually the clearest statement of why the current behaviour is what it is.
 
+## 0.23.0 — bounded factory control and retained evidence (2026-09-11)
+
+- Add an opt-in work-ledger v4 contract, strict builders/readers, deterministic fixtures and explicit
+  authority-scoped projection. Ledger v3 remains the default governance format; existing v2/v3 paths and
+  behavior are unchanged.
+- Add opt-in execution retention for exact available process, Herdr and native-session evidence without
+  converting runtime completion into acceptance or claiming unavailable bytes.
+- Add one fixed `linux-bwrap-digest-v1` effect profile with durable aggregate attempt/input/concurrency
+  accounting. It executes package-owned digest/hold code only; arbitrary shell/model profiles, shared
+  writable destinations and aggregate CPU/memory/money enforcement remain unsupported.
+- Add versioned resource dispatch and work-intent controls, bounded experiments and factory orders. Exact
+  authority, CAS, quiescence, reservation and acknowledgement boundaries fail closed; unknown ownership is
+  never replayed, refunded or inferred as success.
+- Add read-only daily projections, retained blind debrief/checkpoint adapters and an explicit dashboard host
+  transport over a private bounded socket. Presentation, steering and cancellation require independently
+  supplied exact authority; refresh remains read-only and does not authenticate a human or module.
+- Retain original ordinary-child cancellation handles and intent admission holds without replacing caller
+  lifetimes. Best-effort terminal observation failure stays visible but no longer permanently poisons a
+  known-settled boundary; required failure, unknown ownership and late coverage still refuse quiescence.
+- Reject benign stale dashboard CAS and immutable-ID mismatches without poisoning the host before any
+  claim/effect. Attempted or uncertain effects retain the existing failed/unknown stop.
+- Remove each newly owned native-profile probe fixture after all probe children settle, on success and
+  failure, without sweeping historical or caller-selected directories.
+- CI now provisions bubblewrap on its ephemeral Ubuntu 26.04 preview runners, records bounded runtime
+  diagnostics and stages a verified job-owned Node runtime. These observations do not establish a general
+  sandbox or a new supported-host guarantee.
+- Add public subpath exports and versioned artifacts for the new work-ledger, resource, experiment,
+  factory-order, effect-profile, retention, debrief and dashboard-host APIs. The workspace root remains
+  private; `pi-daddy` is the only published package. No dependency ranges changed.
+
 ## 0.22.0 — fail-closed audit follow-ups (2026-09-04)
 
 - **BREAKING — invalid project stores now fail closed.** Malformed, unsupported, unreadable and wrong-directory

package/contracts/daily-view/v1/README.md

@@ -0,0 +1,114 @@
+# P04 daily read-model v1 — input for P07/P08
+
+Implemented candidate, local only. Independent overall review and formal acceptance remain pending.
+This is an actual read-only path through the existing `pi-daddy-dashboard` CLI/Herdr plugin, not a control
+API or an accepted-work counter derived from archive exits. P05 targeted control remains unavailable here.
+
+The authority snapshot has its OWN identity namespace, distinct from the selected work snapshot.
+Current/stale applicability derives from actual P01 claim/selection/matched-receipt validation, not equality
+of those IDs/digests. Missing authority and superseded/mismatched receipts cannot carry acceptance forward.
+The real walking P01 fixture with distinct identities is covered; P01 validation itself is unchanged.
+
+## Pinned P03 input, independent P01 authority
+
+`p03/` vendors exact immutable Git blobs from skill-harness
+`a311df8c991108ada7b6f4b901332232a78e9a44`. `p03/provenance.json` records paths/SHA256. Those schema/fixture
+bytes are unchanged. Input version is exactly `execution-archive-projection-v1`; the reader rejects other
+versions, duplicate JSON members/execution identities, contradictory terminal shapes and lossy numeric
+forms. It supports the adapter's emitted integer-token subset. P03 is always partial/not-assessed.
+
+Work intent is rebuilt with existing `projectWorkLedger` from separately configured strict work-v4 bytes.
+Exact selected scope/obligation revisions and occurrence bindings attach attempts by **executionId**, not
+child names, output labels, file tails, sessions or timestamps. Claimed P03 runtime and P01 runtime remain
+separate; disagreements are diagnostic. P03 conflicts neither grant nor revoke independently supplied P01
+acceptance. All active branches remain null, even if P01 labels or P03 reported sessions contain other hints.
+
+Only a genuine host supplies `workContext` to `readDailyView`/`dashboardFrame`. The reader detaches it before
+I/O and invokes P01 validation; it never manufactures decisions/availability from claims or loads authority
+from a file/environment variable. Missing authority or authority for another selection means unresolved
+acceptance, not zero completed work. Accepted results are explicitly **under supplied snapshot authority**,
+not fresh native approval. The host must independently establish availability/authority when resupplying it.
+
+## Existing view path
+
+The existing plugin command still calls `runDashboard`. Operator-only read settings are forwarded by its
+existing open/reuse seam (no new plugin, worker hook or installation flow):
+
+- `PI_DADDY_ARCHIVE_PROJECTION`: exact P03 snapshot file.
+- `PI_DADDY_WORK_LEDGER`: exact separate work-v4 file.
+- `PI_DADDY_WORK_SNAPSHOT`: JSON containing P01's exact `{snapshot:{id,digest},event:{eventId,digest}}` selection.
+  This is selection **only**, never authority. Pane reuse keys include these settings and their CWD.
+
+CLI equivalents are `--archive-projection`, `--work-ledger`, `--work-snapshot`, plus `--once --no-color` or
+`--once --daily-json`. No new files are discovered, installed or written by a status read. Legacy dashboard
+behavior is unchanged when no daily input is configured. Existing core/plugin protocol validation remains.
+Without a programmatic host-authority context the CLI intentionally cannot show authoritative acceptance.
+
+```ts
+import { readDailyView, createDailyViewReader } from 'pi-daddy/daily-view';
+const read = createDailyViewReader(); // session-local gap metadata, not an authority store
+const view = await read({ archiveProjectionPath, workLedgerPath, workContext: independentlyVerifiedP01Context,
+  sourceManifestFiles: policyAuthorizedManifestPathsBySha256 });
+// renderDailyView(view) is exported from the package root; dashboardFrame({cwd, dailyView: options})
+// invokes the same reader/render path. Rendering an arbitrary caller object is not validation.
+```
+
+## Output contract
+
+`version: "pi-daddy-daily-view-v1"`, `readOnly:true`, `freshness:"snapshot-unknown"`, `coverage:"partial"`.
+Public TypeScript types: `DailyView`, `DailyObligation`, `DailyAttempt`, `DailyViewOptions` in `src/daily-view.ts`.
+The deterministic `fixtures/view.json` and `fixtures/view.txt` are emitted by the actual reader/renderer.
+
+- `scope` is an exact P01 revision or null; `selectedSnapshot` retains the exact selection references.
+- `scopeState`, `authority`, and nullable `progress` are independent of runtime counts. Authority is
+  unavailable, stale-for-selection, or supplied-host-context. Obligations include intent/policy revisions,
+  acceptance, unstarted/attached activity, artifact/evidence coverage, matched receipt IDs, claim sources
+  and obstacle codes. IDs are shown because work-v4 has no verified human description text here.
+- `attempts` preserves exact execution identity, P01 logical child/runtime and separate validated P03 row
+  (parents/public calls/archive IDs/reported sessions/outcome/issues). Reused child names stay separate.
+  `activeBranch` is always null. An archive exit0, including failed-control exit0, is never acceptance.
+- `sourceAvailability` requires actual caller-authorized bytes matching each SHA256. No projection-supplied
+  path/URL is read. Missing mappings/deleted files are missing; mismatches/errors are not recovered facts.
+  Raw-manifest availability does not independently revalidate native transcript/check blobs or provenance.
+- Check/evidence detail comes from P01's authority-aware coverage/receipt matching. P03 v1 has no named-check
+  receipt byte payload; that gap is printed, not inferred from a terminal result or an absent issue string.
+- `sources` reports read/missing/error/unconfigured and exact file hashes. `issues` and `narrative` carry
+  deterministic coverage/obstacle explanations. No raw invalid input/error excerpts are rendered.
+
+Reads are bounded regular non-symlink descriptor snapshots (4 MiB P03, 16 MiB work; at most 128 explicitly
+mapped 64 KiB source manifests). Descriptor/path changes during read become errors. Every refresh rereads
+rather than extending a cached execution history. Missing/error frames do not retain old runtime rows.
+Reconnect produces a resnapshot and sticky gap label, never invented continuity. A new process starts with
+an initial snapshot, not recovered history. Mtime is only a consistency check, never freshness or branch
+proof. Rendering strips terminal control characters and caps lines/columns with visible omissions.
+
+## Supported and BLOCKED scope
+
+Supported: deterministic file-backed read-only view, real CLI and freshly isolated compiled plugin-command
+execution, plus fixture transport wiring through the existing plugin open seam. No worker/model/native-gate
+call is needed. Repeated reads preserve session/control bytes and message counts; disconnected/unavailable
+models do not prevent useful status. Model connectivity itself remains unknown, not falsely "connected".
+
+**BLOCKED live qualification:** no deployed P03 live archive policy/subscription or actual passive live
+transport freshness was supplied. No live Herdr pane/worker observation is claimed; no terminal read,
+scroll, monitoring prompt or control message was used. Installed smoke is separate from isolated compiled
+checks. Full native session/active-branch gaps from P02 and P06's arbitrary-shell/shared-write/aggregate
+CPU-memory-PID-money limitations remain. No accepted packet, fresh source, steering, dispatch or recovery
+can be inferred from the daily view. P07/P08 must preserve these distinctions.
+
+## Fixtures and reproduction
+
+The fixture combines three fixed P01 obligations, two independently reconstructed fixture decisions and
+one exited-but-unaccepted obligation with the exact six-row P03 fixture. P01's known branch labels are
+explicit **test-world declarations**, not authentication of P03's unknown live branches. No authority is
+constructed from incoming wire claims. Separate tests cover unstarted work, missing evidence, changed
+scope/stale authority, unavailable sources, reconnect gaps and read-only repeated operation.
+
+```sh
+node --test packages/pi-daddy/test/daily-view.test.ts
+node packages/pi-daddy/scripts/generate-daily-view-fixture.ts --check packages/pi-daddy/contracts/daily-view/v1/fixtures /absolute/owned/scratch-parent
+```
+
+The generator is repository fixture tooling, imports read-only and writes only explicit owned scratch/new
+targets. Check does not change published fixtures; scratch is retained for inspection. No install, model
+call, per-task review loop, mutation machinery or automatic authority/store update is involved.

package/contracts/daily-view/v1/fixtures/view.json

@@ -0,0 +1,525 @@
+{
+  "version": "pi-daddy-daily-view-v1",
+  "readOnly": true,
+  "freshness": "snapshot-unknown",
+  "model": "not-consulted-connectivity-unknown",
+  "continuity": "initial-snapshot",
+  "scopeChanged": false,
+  "scope": {
+    "kind": "scope",
+    "id": "daily-scope",
+    "revision": 1,
+    "digest": "a183590cd4dd4c8b5762782b50bd495bc58e29cc36a9364d67da50c58f725b7c"
+  },
+  "selectedSnapshot": {
+    "event": {
+      "digest": "afdef6f804e52f1e7bbb241a2431d074b2fcdad6741704d1c27e882a69c801e8",
+      "eventId": "daily:snapshot"
+    },
+    "snapshot": {
+      "digest": "c8036e5db5354f06df8aa599c4a423893cef907fbc10e67b0d7e7b155f8557f2",
+      "id": "daily-selected"
+    }
+  },
+  "scopeState": "valid",
+  "progress": {
+    "accepted": 2,
+    "total": 3
+  },
+  "authority": "supplied-host-context",
+  "coverage": "partial",
+  "sources": {
+    "archive": "read",
+    "work": "read",
+    "archiveSha256": "ef06d522a6430e9b3981eb133c8a3a56de774faeda239c3e5f3570c469a50641",
+    "workSha256": "6e45ad5ab8ba57a8939ab0c23881e9278749801f025cfd966f1d5a7372b0fb86"
+  },
+  "obligations": [
+    {
+      "key": "{\"artifact\":{\"digest\":\"34428e45f264ca6125d246ed999fafa97674da7c2b1aa4b26e3172b7eb9cfcfe\",\"id\":\"artifact-1\",\"kind\":\"artifact\",\"revision\":1},\"intent\":{\"digest\":\"0e0014e541bffa38ce48dedd9ad76bb4193a28d7816567dd7a57501ff2f5565a\",\"id\":\"intent-1\",\"kind\":\"goal\",\"revision\":1},\"obligation\":{\"digest\":\"e352f70479ce0611e5822ccd274f1636483a0304382f0ea44e94102883681661\",\"id\":\"obligation-1\",\"kind\":\"obligation\",\"revision\":1},\"policy\":{\"digest\":\"aa771e69db7d922dd497a3beb4b874e0b94f71a743f73e192dd94f42a466b056\",\"id\":\"daily-policy\",\"kind\":\"policy\",\"revision\":1}}",
+      "intent": {
+        "digest": "0e0014e541bffa38ce48dedd9ad76bb4193a28d7816567dd7a57501ff2f5565a",
+        "id": "intent-1",
+        "kind": "goal",
+        "revision": 1
+      },
+      "obligation": {
+        "digest": "e352f70479ce0611e5822ccd274f1636483a0304382f0ea44e94102883681661",
+        "id": "obligation-1",
+        "kind": "obligation",
+        "revision": 1
+      },
+      "policy": {
+        "digest": "aa771e69db7d922dd497a3beb4b874e0b94f71a743f73e192dd94f42a466b056",
+        "id": "daily-policy",
+        "kind": "policy",
+        "revision": 1
+      },
+      "acceptance": "accepted-under-supplied-authority",
+      "artifactCoverage": "available",
+      "evidenceCoverage": "available",
+      "receiptIds": [
+        "fixed-receipt-1"
+      ],
+      "claimReferences": [
+        "daily:claim:1:e4e48e94de0546cdb980012b2f846dbfc659de2c0e38cc363874d096dde288d1"
+      ],
+      "attempts": [
+        "exec:00000000-0000-4000-8000-000000000001"
+      ],
+      "activity": "attempts-attached",
+      "obstacles": []
+    },
+    {
+      "key": "{\"artifact\":{\"digest\":\"f316be953b1f8264975702e6a0d70584a514fd44847ef27011dc0c6334e1b361\",\"id\":\"artifact-2\",\"kind\":\"artifact\",\"revision\":1},\"intent\":{\"digest\":\"f51fb31058723a8807a039b2648c537277424b68acef1724ee521b045bdd2b09\",\"id\":\"intent-2\",\"kind\":\"goal\",\"revision\":1},\"obligation\":{\"digest\":\"09121f0e90f6737c4d46e1168b8dc47fb90285d2db8d0dd4280a31b73d494418\",\"id\":\"obligation-2\",\"kind\":\"obligation\",\"revision\":1},\"policy\":{\"digest\":\"aa771e69db7d922dd497a3beb4b874e0b94f71a743f73e192dd94f42a466b056\",\"id\":\"daily-policy\",\"kind\":\"policy\",\"revision\":1}}",
+      "intent": {
+        "digest": "f51fb31058723a8807a039b2648c537277424b68acef1724ee521b045bdd2b09",
+        "id": "intent-2",
+        "kind": "goal",
+        "revision": 1
+      },
+      "obligation": {
+        "digest": "09121f0e90f6737c4d46e1168b8dc47fb90285d2db8d0dd4280a31b73d494418",
+        "id": "obligation-2",
+        "kind": "obligation",
+        "revision": 1
+      },
+      "policy": {
+        "digest": "aa771e69db7d922dd497a3beb4b874e0b94f71a743f73e192dd94f42a466b056",
+        "id": "daily-policy",
+        "kind": "policy",
+        "revision": 1
+      },
+      "acceptance": "accepted-under-supplied-authority",
+      "artifactCoverage": "available",
+      "evidenceCoverage": "available",
+      "receiptIds": [
+        "fixed-receipt-2"
+      ],
+      "claimReferences": [
+        "daily:claim:2:8ced78eedd001ad5460d5ddd9dedd93f92d8614c1b797dd7235db5dadd89685b"
+      ],
+      "attempts": [
+        "exec:00000000-0000-4000-8000-000000000002"
+      ],
+      "activity": "attempts-attached",
+      "obstacles": []
+    },
+    {
+      "key": "{\"artifact\":{\"digest\":\"c563224d012b82fe5dd0a49742da45a416b086e10e48d134613b9d9d04c18246\",\"id\":\"artifact-3\",\"kind\":\"artifact\",\"revision\":1},\"intent\":{\"digest\":\"6bc0d8a965a8148879825be23be219c10eb430d224728d246b94ea469462306f\",\"id\":\"intent-3\",\"kind\":\"goal\",\"revision\":1},\"obligation\":{\"digest\":\"376ede207e70ab90dcf09f98f55e34593815f97b0aa8e7ff80754bef351f0e52\",\"id\":\"obligation-3\",\"kind\":\"obligation\",\"revision\":1},\"policy\":{\"digest\":\"aa771e69db7d922dd497a3beb4b874e0b94f71a743f73e192dd94f42a466b056\",\"id\":\"daily-policy\",\"kind\":\"policy\",\"revision\":1}}",
+      "intent": {
+        "digest": "6bc0d8a965a8148879825be23be219c10eb430d224728d246b94ea469462306f",
+        "id": "intent-3",
+        "kind": "goal",
+        "revision": 1
+      },
+      "obligation": {
+        "digest": "376ede207e70ab90dcf09f98f55e34593815f97b0aa8e7ff80754bef351f0e52",
+        "id": "obligation-3",
+        "kind": "obligation",
+        "revision": 1
+      },
+      "policy": {
+        "digest": "aa771e69db7d922dd497a3beb4b874e0b94f71a743f73e192dd94f42a466b056",
+        "id": "daily-policy",
+        "kind": "policy",
+        "revision": 1
+      },
+      "acceptance": "unaccepted",
+      "artifactCoverage": "unknown",
+      "evidenceCoverage": "unknown",
+      "receiptIds": [],
+      "claimReferences": [],
+      "attempts": [
+        "exec:00000000-0000-4000-8000-000000000003"
+      ],
+      "activity": "attempts-attached",
+      "obstacles": [
+        "P01:NO_CLAIM"
+      ]
+    }
+  ],
+  "attempts": [
+    {
+      "executionId": "exec:00000000-0000-4000-8000-000000000001",
+      "logicalChildId": "reused-worker",
+      "intentRuntime": "completed",
+      "archive": {
+        "executionId": "exec:00000000-0000-4000-8000-000000000001",
+        "parentExecutionIds": [
+          "exec:00000000-0000-4000-8000-000000000099"
+        ],
+        "retainedSessionIds": [],
+        "activeBranch": null,
+        "toolCallIds": [
+          "call:layout:1"
+        ],
+        "archiveIds": [
+          "00000000-0000-4000-8000-000000000001"
+        ],
+        "runtime": "terminal",
+        "outcome": {
+          "code": 0,
+          "signal": null,
+          "timedOut": false,
+          "aborted": false,
+          "truncated": false,
+          "failed": false
+        },
+        "sourceReferences": [
+          "aa913c6061b2e51e13a729facd19a0ca53c466cc603ba84d6da09842ff9d74f5"
+        ],
+        "issues": [
+          "active-branch-unknown",
+          "content-missing:checkReceipt",
+          "content-missing:paneSnapshot",
+          "content-missing:result",
+          "content-missing:session",
+          "content-missing:stderr",
+          "content-missing:stdout",
+          "native-session-unavailable",
+          "parent-not-in-snapshot"
+        ],
+        "coverage": "partial",
+        "acceptance": "not-assessed"
+      },
+      "sourceAvailability": [
+        {
+          "sha256": "aa913c6061b2e51e13a729facd19a0ca53c466cc603ba84d6da09842ff9d74f5",
+          "state": "missing"
+        }
+      ],
+      "issues": [
+        "P01-P03-parent-disagreement",
+        "P03:active-branch-unknown",
+        "P03:content-missing:checkReceipt",
+        "P03:content-missing:paneSnapshot",
+        "P03:content-missing:result",
+        "P03:content-missing:session",
+        "P03:content-missing:stderr",
+        "P03:content-missing:stdout",
+        "P03:native-session-unavailable",
+        "P03:parent-not-in-snapshot",
+        "source-bytes-unavailable-or-mismatched"
+      ],
+      "activeBranch": null
+    },
+    {
+      "executionId": "exec:00000000-0000-4000-8000-000000000002",
+      "logicalChildId": "reused-worker",
+      "intentRuntime": "completed",
+      "archive": {
+        "executionId": "exec:00000000-0000-4000-8000-000000000002",
+        "parentExecutionIds": [
+          "exec:00000000-0000-4000-8000-000000000099"
+        ],
+        "retainedSessionIds": [],
+        "activeBranch": null,
+        "toolCallIds": [
+          "call:layout:2"
+        ],
+        "archiveIds": [
+          "00000000-0000-4000-8000-000000000002"
+        ],
+        "runtime": "terminal",
+        "outcome": {
+          "code": 0,
+          "signal": null,
+          "timedOut": false,
+          "aborted": false,
+          "truncated": false,
+          "failed": false
+        },
+        "sourceReferences": [
+          "ce7f59468b935af873c7dbb063cac3431dc0d12ec5b969d9984dc12547d61192"
+        ],
+        "issues": [
+          "active-branch-unknown",
+          "content-missing:checkReceipt",
+          "content-missing:paneSnapshot",
+          "content-missing:result",
+          "content-missing:session",
+          "content-missing:stderr",
+          "content-missing:stdout",
+          "native-session-unavailable",
+          "parent-not-in-snapshot"
+        ],
+        "coverage": "partial",
+        "acceptance": "not-assessed"
+      },
+      "sourceAvailability": [
+        {
+          "sha256": "ce7f59468b935af873c7dbb063cac3431dc0d12ec5b969d9984dc12547d61192",
+          "state": "missing"
+        }
+      ],
+      "issues": [
+        "P01-P03-parent-disagreement",
+        "P03:active-branch-unknown",
+        "P03:content-missing:checkReceipt",
+        "P03:content-missing:paneSnapshot",
+        "P03:content-missing:result",
+        "P03:content-missing:session",
+        "P03:content-missing:stderr",
+        "P03:content-missing:stdout",
+        "P03:native-session-unavailable",
+        "P03:parent-not-in-snapshot",
+        "source-bytes-unavailable-or-mismatched"
+      ],
+      "activeBranch": null
+    },
+    {
+      "executionId": "exec:00000000-0000-4000-8000-000000000003",
+      "logicalChildId": "reused-worker",
+      "intentRuntime": "completed",
+      "archive": {
+        "executionId": "exec:00000000-0000-4000-8000-000000000003",
+        "parentExecutionIds": [
+          "exec:00000000-0000-4000-8000-000000000099"
+        ],
+        "retainedSessionIds": [
+          "11111111-1111-4111-8111-111111111111"
+        ],
+        "activeBranch": null,
+        "toolCallIds": [
+          "call:layout:3"
+        ],
+        "archiveIds": [
+          "00000000-0000-4000-8000-000000000003"
+        ],
+        "runtime": "terminal",
+        "outcome": {
+          "code": 0,
+          "signal": null,
+          "timedOut": false,
+          "aborted": false,
+          "truncated": false,
+          "failed": false
+        },
+        "sourceReferences": [
+          "a9b1899c783b41796342741fd38fdf5c77c7833047d4cb3d8f7829d1f62290bd"
+        ],
+        "issues": [
+          "active-branch-unknown",
+          "content-missing:checkReceipt",
+          "content-missing:paneSnapshot",
+          "content-missing:stderr",
+          "content-missing:stdout",
+          "not-acceptance-evidence",
+          "parent-not-in-snapshot"
+        ],
+        "coverage": "partial",
+        "acceptance": "not-assessed"
+      },
+      "sourceAvailability": [
+        {
+          "sha256": "a9b1899c783b41796342741fd38fdf5c77c7833047d4cb3d8f7829d1f62290bd",
+          "state": "missing"
+        }
+      ],
+      "issues": [
+        "P01-P03-parent-disagreement",
+        "P03:active-branch-unknown",
+        "P03:content-missing:checkReceipt",
+        "P03:content-missing:paneSnapshot",
+        "P03:content-missing:stderr",
+        "P03:content-missing:stdout",
+        "P03:not-acceptance-evidence",
+        "P03:parent-not-in-snapshot",
+        "source-bytes-unavailable-or-mismatched"
+      ],
+      "activeBranch": null
+    },
+    {
+      "executionId": "exec:00000000-0000-4000-8000-000000000004",
+      "logicalChildId": null,
+      "intentRuntime": "unknown",
+      "archive": {
+        "executionId": "exec:00000000-0000-4000-8000-000000000004",
+        "parentExecutionIds": [
+          "exec:00000000-0000-4000-8000-000000000099"
+        ],
+        "retainedSessionIds": [
+          "11111111-1111-4111-8111-111111111111"
+        ],
+        "activeBranch": null,
+        "toolCallIds": [
+          "call:layout:4"
+        ],
+        "archiveIds": [
+          "00000000-0000-4000-8000-000000000004"
+        ],
+        "runtime": "terminal",
+        "outcome": {
+          "code": 0,
+          "signal": null,
+          "timedOut": false,
+          "aborted": false,
+          "truncated": false,
+          "failed": false
+        },
+        "sourceReferences": [
+          "d0171dd7cf8e8853511eb5f5e85659de6c3348c82414bd6b77db93c4e243850f"
+        ],
+        "issues": [
+          "active-branch-not-independently-verified",
+          "content-missing:checkReceipt",
+          "content-missing:paneSnapshot",
+          "content-missing:stderr",
+          "content-missing:stdout",
+          "not-acceptance-evidence",
+          "parent-not-in-snapshot"
+        ],
+        "coverage": "partial",
+        "acceptance": "not-assessed"
+      },
+      "sourceAvailability": [
+        {
+          "sha256": "d0171dd7cf8e8853511eb5f5e85659de6c3348c82414bd6b77db93c4e243850f",
+          "state": "missing"
+        }
+      ],
+      "issues": [
+        "P03:active-branch-not-independently-verified",
+        "P03:content-missing:checkReceipt",
+        "P03:content-missing:paneSnapshot",
+        "P03:content-missing:stderr",
+        "P03:content-missing:stdout",
+        "P03:not-acceptance-evidence",
+        "P03:parent-not-in-snapshot",
+        "source-bytes-unavailable-or-mismatched"
+      ],
+      "activeBranch": null
+    },
+    {
+      "executionId": "exec:00000000-0000-4000-8000-000000000005",
+      "logicalChildId": null,
+      "intentRuntime": "unknown",
+      "archive": {
+        "executionId": "exec:00000000-0000-4000-8000-000000000005",
+        "parentExecutionIds": [
+          "exec:00000000-0000-4000-8000-000000000099"
+        ],
+        "retainedSessionIds": [
+          "11111111-1111-4111-8111-111111111111"
+        ],
+        "activeBranch": null,
+        "toolCallIds": [
+          "call:layout:5"
+        ],
+        "archiveIds": [
+          "00000000-0000-4000-8000-000000000005"
+        ],
+        "runtime": "terminal",
+        "outcome": {
+          "code": null,
+          "signal": "SIGTERM",
+          "timedOut": false,
+          "aborted": true,
+          "truncated": true,
+          "failed": true
+        },
+        "sourceReferences": [
+          "a6b253ade21351387e9df56fd2d686e022a356d72d46268a2feba346a6d616aa"
+        ],
+        "issues": [
+          "content-missing:checkReceipt",
+          "content-missing:paneSnapshot",
+          "content-missing:stderr",
+          "content-missing:stdout",
+          "native-session-incomplete-bytes",
+          "not-acceptance-evidence",
+          "parent-not-in-snapshot"
+        ],
+        "coverage": "partial",
+        "acceptance": "not-assessed"
+      },
+      "sourceAvailability": [
+        {
+          "sha256": "a6b253ade21351387e9df56fd2d686e022a356d72d46268a2feba346a6d616aa",
+          "state": "missing"
+        }
+      ],
+      "issues": [
+        "P03:content-missing:checkReceipt",
+        "P03:content-missing:paneSnapshot",
+        "P03:content-missing:stderr",
+        "P03:content-missing:stdout",
+        "P03:native-session-incomplete-bytes",
+        "P03:not-acceptance-evidence",
+        "P03:parent-not-in-snapshot",
+        "source-bytes-unavailable-or-mismatched"
+      ],
+      "activeBranch": null
+    },
+    {
+      "executionId": "exec:00000000-0000-4000-8000-000000000006",
+      "logicalChildId": null,
+      "intentRuntime": "unknown",
+      "archive": {
+        "executionId": "exec:00000000-0000-4000-8000-000000000006",
+        "parentExecutionIds": [
+          "exec:00000000-0000-4000-8000-000000000099"
+        ],
+        "retainedSessionIds": [],
+        "activeBranch": null,
+        "toolCallIds": [
+          "call:layout:6"
+        ],
+        "archiveIds": [
+          "00000000-0000-4000-8000-000000000006"
+        ],
+        "runtime": "terminal",
+        "outcome": {
+          "code": 0,
+          "signal": null,
+          "timedOut": false,
+          "aborted": false,
+          "truncated": false,
+          "failed": false
+        },
+        "sourceReferences": [
+          "4a3b22a4351f333b47a7b63ac7acf87757558ba16a2f80911f7055f205d2f795"
+        ],
+        "issues": [
+          "active-branch-unknown",
+          "content-missing:checkReceipt",
+          "content-missing:paneSnapshot",
+          "content-missing:result",
+          "content-missing:session",
+          "content-missing:stderr",
+          "content-missing:stdout",
+          "native-session-file-replaced",
+          "native-session-unavailable",
+          "parent-not-in-snapshot"
+        ],
+        "coverage": "partial",
+        "acceptance": "not-assessed"
+      },
+      "sourceAvailability": [
+        {
+          "sha256": "4a3b22a4351f333b47a7b63ac7acf87757558ba16a2f80911f7055f205d2f795",
+          "state": "missing"
+        }
+      ],
+      "issues": [
+        "P03:active-branch-unknown",
+        "P03:content-missing:checkReceipt",
+        "P03:content-missing:paneSnapshot",
+        "P03:content-missing:result",
+        "P03:content-missing:session",
+        "P03:content-missing:stderr",
+        "P03:content-missing:stdout",
+        "P03:native-session-file-replaced",
+        "P03:native-session-unavailable",
+        "P03:parent-not-in-snapshot",
+        "source-bytes-unavailable-or-mismatched"
+      ],
+      "activeBranch": null
+    }
+  ],
+  "issues": [
+    "P01:NO_CLAIM"
+  ],
+  "narrative": "3 scoped obligation(s); 2/3 accepted under supplied P01 authority; 6 distinct attempt(s). Runtime exits do not establish acceptance. Snapshot freshness unknown."
+}