prizmkit 1.1.137 → 1.1.139

package/bundled/dev-pipeline/templates/sections/bugfix-mission.md

@@ -6,4 +6,4 @@ You are the **bug fix session orchestrator**. Fix Bug {{BUG_ID}}: "{{BUG_TITLE}}
 
 **NON-INTERACTIVE MODE**: There is NO human on the other end. NEVER ask for user confirmation, NEVER wait for user input. Make decisions autonomously from the bug report, existing code, tests, and conservative project patterns.
 
-**Execution model**: You implement directly in the current checkout. Do not spawn a top-level Dev subagent. The current Main Agent runs `/prizmkit-code-review` directly and owns its complete review, repair, verification, and reporting loop without direct or indirect review delegation.
+**Execution model**: Follow the active skills and runtime contracts for planning, implementation, review, recovery, and commit. Those contracts determine the execution topology, permissions, and delegation boundaries.

package/bundled/dev-pipeline/templates/sections/bugfix-phase-review.md

@@ -2,17 +2,9 @@
 
 Code review is mandatory for every committable Bugfix, including small or obvious fixes. Do not create a FAST_PATH that skips this gate.
 
-Run `/prizmkit-code-review` with `artifact_dir=.prizmkit/bugfix/{{BUG_ID}}/`. The skill runs a mandatory Main-Agent review loop for up to ten completed rounds: the Main Agent reviews the complete current change, rejects unsupported candidate findings, directly repairs accepted findings, verifies repairs, and repeats until `accepted = 0` with no unresolved findings. After convergence, one skill-owned independent Reviewer is optional only when the strict structural capability gate passes; otherwise no Reviewer is created.
+Run `/prizmkit-code-review` with `artifact_dir=.prizmkit/bugfix/{{BUG_ID}}/` and follow the skill's complete review contract for review execution, repairs, verification, evidence, and handoff. Do not invoke another review skill or add a second review path outside that contract.
 
-The Code Review execution boundary is closed for this phase:
-
-- Do not delegate the mandatory Main-Agent review or invoke another review skill or workflow.
-- Do not add review execution outside the single optional Reviewer owned and gated by `prizmkit-code-review`.
-- The optional Reviewer must be structurally read-only, unable to execute arbitrary commands or downstream execution, and natively resumable as the same unit; otherwise strict downgrade applies.
-- Direct reading, searching, editing, and testing by the current Main Agent remain allowed.
-- `review-report.md` is the only persisted review artifact; do not append separate Review Notes to another artifact.
-
-Missing required evidence, an unsafe repair, a failed verification, or failure to converge by round ten produces `NEEDS_FIXES`.
+Missing required evidence, an unsafe repair, a failed verification, or failure to converge under the review contract produces `NEEDS_FIXES`.
 
 **Gate Check — Final Review Result**:
 

package/bundled/dev-pipeline/templates/sections/bugfix-reminders.md

@@ -5,7 +5,8 @@
 - The first plan task must prove the bug with a reproduction test when feasible.
 - Commit with `fix(<scope>):`, not `feat:`.
 - Do not write TRAP dates into `.prizmkit/prizm-docs/`.
-- Do not use top-level Dev subagents; implement directly as the orchestrator.
+- Follow the active skills and runtime contracts; they determine execution topology, review ownership, and delegation boundaries.
+- On execution-unit timeout, preserve the active checkout and artifacts and follow the owning contract's recovery or downgrade path.
 - Checkpoint state is the recovery truth; skipped steps must be marked `skipped`.
 - Browser verification is a mandatory attempt by default; it blocks only when explicitly required.
 - If `DEV_PORT` is unknown, discover it from project config; do not guess port 3000.

package/bundled/dev-pipeline/templates/sections/context-budget-rules.md

@@ -4,9 +4,9 @@ You are running in **headless non-interactive mode** with a FINITE context windo
 
 0. **NON-INTERACTIVE MODE** — There is NO human on the other end. NEVER ask for user confirmation, NEVER wait for user input, NEVER use interactive prompts (e.g. "Would you like me to…"). If a skill has an interactive step (e.g. offer remediation, ask for approval), skip it and proceed autonomously. Make decisions based on the data available and move forward.
 
-1. **context-snapshot.md is your single source of truth** — After it is available, use it instead of re-reading individual source files. If you just created or updated it in this session, continue from the in-context content; read it only when resuming/continuing, after context compaction/loss, or when handing work to a subagent.
+1. **context-snapshot.md is your single source of truth** — After it is available, use it instead of re-reading individual source files. If you just created or updated it in this session, continue from the in-context content; read it only when resuming/continuing, after context compaction/loss, or when handing work to an execution unit.
 2. **Never re-read your own writes** — After you create/modify a file, do NOT read it back to verify. Trust your write was correct.
-3. **Never re-read unmodified files** — Once you have read a file into context, do NOT read it again unless it was modified by an Edit/Write operation after your last read. Use platform file/search tools for targeted lookup; when shell-free helper lookup is needed, run `{{RUNTIME_HELPER_CMD}} text search <file> --pattern "<pattern>" --json`, then read only the smallest bounded range with the platform file-reading tool instead of full-file Read. Before issuing a Read, ask yourself: "Have I read this file before, and has it changed since?" If the answer is "no, it hasn't changed" — do NOT read it. This applies to all files summarized in context-snapshot.md Section 4. Normal work delegation outside the optional skill-owned review contract must receive context-snapshot.md and rely on it rather than independently re-reading files the Main Agent already read. Code Review keeps mandatory Main-Agent ownership and may use only its strict-gated skill-owned Reviewer after convergence.
+3. **Never re-read unmodified files** — Once you have read a file into context, do NOT read it again unless it was modified by an Edit/Write operation after your last read. Use platform file/search tools for targeted lookup; when shell-free helper lookup is needed, run `{{RUNTIME_HELPER_CMD}} text search <file> --pattern "<pattern>" --json`, then read only the smallest bounded range with the platform file-reading tool instead of full-file Read. Before issuing a Read, ask yourself: "Have I read this file before, and has it changed since?" If the answer is "no, it hasn't changed" — do NOT read it. This applies to all files summarized in context-snapshot.md Section 4. Follow the active skill and runtime contracts when an execution unit is created; do not infer its permissions, continuation, or retry behavior from this prompt.
 4. **Stay focused** — Do NOT explore code unrelated to this feature. No curiosity-driven reads.
 5. **One task at a time** — Complete and test one task before starting the next.
 6. **Minimize tool output** — Never load full command output into context. First capture command output to a temp file using the command/tool output option or the host-appropriate redirection, then inspect only the final relevant lines and use targeted search helpers to extract the information needed for the current task. Only read the filtered result — never the raw full output.

package/bundled/dev-pipeline/templates/sections/phase-implement-agent.md

@@ -1,23 +1,23 @@
-### Implement — Orchestrator Direct (no Dev subagent)
+### Implement — Plan Execution
 
-**Rationale**: Development is deterministic plan execution — the orchestrator already built full context in Phase 1. Spawning a Dev subagent forces it to rebuild context (re-reading files the orchestrator already read), wastes context, and risks worktree double-edit. The orchestrator implements directly.
+Execute the reviewed plan through the active implementation skill. The skill and runtime determine the execution topology; preserve the shared artifact directory, active checkout, and task checkpoints.
 
 Before starting, check plan.md Tasks:
 ```bash
 {{RUNTIME_HELPER_CMD}} text count .prizmkit/specs/{{FEATURE_SLUG}}/plan.md --pattern "- [ ]"
 ```
 - If result is `0` (all tasks already `[x]`) → **SKIP to Review**.
-- If non-zero → implement directly below.
+- If non-zero → execute the remaining tasks below.
 
 **Build artifacts rule**: After any build/compile command, ensure output is in `.gitignore`. Never commit binaries/build output.
 
 **3a.** Run `/prizmkit-implement` directly:
 - Continue from the `spec.md` / `plan.md` / `context-snapshot.md` content you created in Phase 1-2; do not re-read self-authored artifacts just because implementation starts
 - Re-read `plan.md` or `context-snapshot.md` only when resuming/continuing, when current context was compacted or lost, or when task checkbox state may have changed outside this session
-- Implementation remains in the current Main Agent; do not delegate it to a Dev subagent
+- Follow the implementation skill's current execution and delegation contract
 - Use context-snapshot.md Section 4 File Manifest for targeted source reads; avoid re-reading source files already summarized there unless they changed after the snapshot
 - Implements task-by-task, marking each `[x]` immediately
-- Remeber to update checkpoints after finishing a series of tasks
+- Remember to update checkpoints after finishing a series of tasks
 
 **3b. Focused checks only (no test gate here)**:
 - During implementation, do not run mandatory periodic or full-suite tests.

package/bundled/dev-pipeline/templates/sections/phase-implement-full.md

@@ -1,23 +1,23 @@
-### Implement — Orchestrator Direct (no Dev subagent)
+### Implement — Plan Execution
 
-**Rationale**: Development is deterministic plan execution — the orchestrator already built full context in Phase 1-2. Spawning a Dev subagent forces it to rebuild context (re-reading files the orchestrator already read), wastes context, and risks worktree double-edit. The orchestrator implements directly.
+Execute the reviewed plan through the active implementation skill. The skill and runtime determine the execution topology; preserve the shared artifact directory, active checkout, and task checkpoints.
 
 Before starting, check plan.md Tasks:
 ```bash
 {{RUNTIME_HELPER_CMD}} text count .prizmkit/specs/{{FEATURE_SLUG}}/plan.md --pattern "- [ ]"
 ```
 - If result is `0` (all tasks already `[x]`) → **SKIP to Review**.
-- If non-zero → implement directly below.
+- If non-zero → execute the remaining tasks below.
 
 **Build artifacts rule**: After any build/compile command, ensure output is in `.gitignore`. Never commit binaries/build output.
 
 **3a.** Run `/prizmkit-implement` directly:
 - Continue from the `spec.md` / `plan.md` / `context-snapshot.md` content you created in Phase 1-2; do not re-read self-authored artifacts just because implementation starts
 - Re-read `plan.md` or `context-snapshot.md` only when resuming/continuing, when current context was compacted or lost, or when task checkbox state may have changed outside this session
-- Implementation remains in the current Main Agent; do not delegate it to a Dev subagent
+- Follow the implementation skill's current execution and delegation contract
 - Use context-snapshot.md Section 4 File Manifest for targeted source reads; avoid re-reading source files already summarized there unless they changed after the snapshot
 - Implements task-by-task, marking each `[x]` immediately
-- Remeber to update checkpoints after finishing a series of tasks
+- Remember to update checkpoints after finishing a series of tasks
 
 **3b. Focused checks only (no test gate here)**:
 - During implementation, do not run mandatory periodic or full-suite tests.

package/bundled/dev-pipeline/templates/sections/phase-prizmkit-test.md

@@ -33,7 +33,8 @@ Preserve the same artifact directory and update the L1 workflow state plus this
 - `TEST_FAIL` with `repair_scope=test-infrastructure` → `prizmkit-implement` → `prizmkit-test`; do not make speculative production edits.
 - `TEST_FAIL` with `repair_scope=production|runtime|schema|dependency|public-interface` → `prizmkit-implement` → `prizmkit-code-review` → `prizmkit-test`.
 - `TEST_FAIL` with unknown or unsafe scope → do not guess a production edit; record `WORKFLOW_BLOCKED` and a safe resume entry.
-- `TEST_BLOCKED` → preserve all evidence and artifacts, perform only bounded environment recovery, then finish terminal `WORKFLOW_BLOCKED` with `blocked_reason=test_blocked`; never edit production speculatively.
+- `TEST_BLOCKED` → preserve all evidence and artifacts, perform only bounded environment recovery, then finish terminal `WORKFLOW_BLOCKED` with `blocked_reason=test_blocked`; never edit production speculatively. When a finalized blocked package exists, pass its validated `manifest`, `verdict`, and `validation` paths to the checkpoint; do not leave these paths null.
+- The builder's evidence-protocol recovery budget is separate from the outer `repair_round`: after bounded preflight/package attempts, stop creating evidence versions and return `TEST_BLOCKED`.
 - The outer `repair_round` is shared across review/test failures and may not exceed three. The Code Review internal loop limit remains separate and is at most ten completed rounds.
 
 A missing, stale, incomplete, mismatched, tampered, or wrong-scope package is not `TEST_PASS`: preserve the evidence, write `failure-log.md`, and leave the checkpoint resumable or blocked according to headless policy.

package/bundled/dev-pipeline/templates/sections/phase-review-agent.md

@@ -1,18 +1,8 @@
 ### Review — Code Review
 
-Review the completed implementation before the scoped feature test gate runs. Use `artifact_dir=.prizmkit/specs/{{FEATURE_SLUG}}/` so `/prizmkit-code-review` can read the spec, plan, context snapshot, implementation log, and current diff. Do not require a prior `/prizmkit-test` report here; the next phase owns the formal test gate.
+Review the completed implementation before the scoped feature test gate runs. Use `artifact_dir=.prizmkit/specs/{{FEATURE_SLUG}}/` so `/prizmkit-code-review` can read the spec, plan, context snapshot, implementation log, and current diff. Follow the skill's current review contract for review execution, repairs, verification, evidence, and handoff. Do not invoke another review skill or add a second review path outside that contract.
 
-Run `/prizmkit-code-review` with `artifact_dir=.prizmkit/specs/{{FEATURE_SLUG}}/`. The skill runs a mandatory Main-Agent review loop for up to ten completed rounds: the Main Agent reviews the complete current change, rejects unsupported candidate findings, directly repairs accepted findings, verifies repairs, and repeats until `accepted = 0` with no unresolved findings. After convergence, one skill-owned independent Reviewer is optional only when the strict structural capability gate passes; otherwise no Reviewer is created.
-
-The Code Review execution boundary is closed for this phase:
-
-- Do not delegate the mandatory Main-Agent review or invoke another review skill or workflow.
-- Do not add review execution outside the single optional Reviewer owned and gated by `prizmkit-code-review`.
-- The optional Reviewer must be structurally read-only, unable to execute arbitrary commands or downstream execution, and natively resumable as the same unit; otherwise strict downgrade applies.
-- Direct reading, searching, editing, and testing by the current Main Agent remain allowed.
-- `review-report.md` is the only persisted review artifact; do not append separate Review Notes to `context-snapshot.md`.
-
-Missing required evidence, an unsafe repair, a failed verification, or failure to converge by round ten produces `NEEDS_FIXES`.
+Missing required evidence, an unsafe repair, a failed verification, or failure to converge by the contract's review limit produces `NEEDS_FIXES`.
 
 **Gate Check — Final Review Result**:
 

package/bundled/dev-pipeline/templates/sections/phase-review-full.md

@@ -2,21 +2,13 @@
 
 Review the completed implementation before the full Feature test gate runs. A review result is a required predecessor; never accept or route around testing as if a review had passed.
 
-Use `artifact_dir=.prizmkit/specs/{{FEATURE_SLUG}}/` so `/prizmkit-code-review` can read the spec, plan, context snapshot, implementation log, and current diff. The skill runs a mandatory Main-Agent review loop of up to ten completed rounds and writes only `review-report.md`. After Main-Agent convergence, the skill may create one skill-owned independent Reviewer only when its strict structural capability gate passes; otherwise it records downgrade and creates none.
+Use `artifact_dir=.prizmkit/specs/{{FEATURE_SLUG}}/` so `/prizmkit-code-review` can read the spec, plan, context snapshot, implementation log, and current diff. Follow the skill's current review contract for review execution, repairs, verification, evidence, and handoff. Do not invoke another review skill or add a second review path outside that contract.
 
 - `REVIEW_PASS` → update checkpoint metadata with `stage=code-review`, `status=REVIEW_PASS`, `stage_result=REVIEW_PASS`, `next_stage=prizmkit-test`, and `resume_from=prizmkit-test`; then run the full test gate.
 - `REVIEW_NEEDS_FIXES` → preserve findings, increment the shared outer `repair_round`, route `prizmkit-implement` → `prizmkit-code-review` → `prizmkit-test`, and do not accept any test result from before the repaired review.
 - If the outer repair round is already three, record `WORKFLOW_BLOCKED`; do not start another repair route.
 
-Missing required evidence, unsafe repair, failed verification, or failure to converge by round ten produces `REVIEW_NEEDS_FIXES`.
-
-The Code Review execution boundary is closed:
-
-- Do not delegate the mandatory Main-Agent review or invoke another review skill or workflow.
-- Do not add review execution outside the single optional Reviewer owned and gated by `prizmkit-code-review`.
-- The optional Reviewer must be structurally read-only, unable to execute arbitrary commands or downstream execution, and natively resumable as the same unit; otherwise strict downgrade applies.
-- Direct reading, searching, editing, and testing by the current Main Agent remain allowed.
-- `review-report.md` is the only persisted review artifact; do not append separate Review Notes to `context-snapshot.md`.
+Missing required evidence, unsafe repair, failed verification, or failure to converge under the review contract produces `REVIEW_NEEDS_FIXES`.
 
 **Gate Check — Final Review Result**:
 

package/bundled/dev-pipeline/templates/sections/phase-specify-plan-full.md

@@ -71,7 +71,7 @@ Before proceeding past CP-1, verify:
 
 ### Plan Self-Check — Orchestrator Direct
 
-Do not delegate planning analysis. The current Main Agent performs a bounded self-check before implementation:
+The active planning skill and runtime determine whether any additional planning execution is appropriate. Do not treat this bounded self-check as a substitute for the planning skill's own review contract.
 
 1. Re-read only `context-snapshot.md`, `spec.md`, and `plan.md`.
 2. Cross-check spec.md and plan.md Tasks against the feature description and Verification Gates in the Task Contract.

package/bundled/dev-pipeline/templates/sections/refactor-mission.md

@@ -4,6 +4,6 @@ You are the **refactor session orchestrator**. Execute Refactor {{REFACTOR_ID}}:
 
 **CRITICAL**: Preserve observable behavior. Do not change product behavior unless the refactor contract explicitly requires it.
 
-**Execution model**: You implement directly in the current checkout. Do not spawn a top-level Dev subagent. The current Main Agent runs `/prizmkit-code-review` directly and owns its complete review, repair, verification, and reporting loop without direct or indirect review delegation.
+**Execution model**: Follow the active skills and runtime contracts for planning, implementation, review, recovery, and commit. Those contracts determine the execution topology, permissions, and delegation boundaries.
 
 **NON-INTERACTIVE MODE**: There is NO human on the other end. Resolve uncertainty from existing code and conservative project patterns.

package/bundled/dev-pipeline/templates/sections/refactor-phase-implement.md

@@ -1,11 +1,11 @@
-### Phase 2: Implement — Orchestrator Direct
+### Phase 2: Implement — Plan Execution
 
 **Goal**: execute the refactor plan while preserving behavior.
 
 Run `/prizmkit-implement` directly with `artifact_dir=.prizmkit/refactor/{{REFACTOR_ID}}/`.
 
 Rules:
-- You are the implementer; do not spawn a top-level Dev subagent.
+- Follow the implementation skill's current execution and delegation contract.
 - Establish a baseline test result before structural changes when feasible.
 - Execute plan tasks in order and mark each `[x]` immediately.
 - After each behavior-sensitive task, run the smallest relevant behavior-preservation check.

package/bundled/dev-pipeline/templates/sections/refactor-phase-review.md

@@ -1,16 +1,8 @@
 ### Phase 3: Review — Code Review & Behavior Verification
 
-Run `/prizmkit-code-review` directly with `artifact_dir=.prizmkit/refactor/{{REFACTOR_ID}}/`. The skill runs a mandatory Main-Agent review loop for up to ten completed rounds: the Main Agent reviews the complete current change, rejects unsupported candidate findings, directly repairs accepted findings, verifies repairs, and repeats until `accepted = 0` with no unresolved findings. After convergence, one skill-owned independent Reviewer is optional only when the strict structural capability gate passes; otherwise no Reviewer is created.
+Run `/prizmkit-code-review` directly with `artifact_dir=.prizmkit/refactor/{{REFACTOR_ID}}/` and follow the skill's complete review contract for review execution, repairs, verification, evidence, and handoff. Do not invoke another review skill or add a second review path outside that contract.
 
-The Code Review execution boundary is closed for this phase:
-
-- Do not delegate the mandatory Main-Agent review or invoke another review skill or workflow.
-- Do not add review execution outside the single optional Reviewer owned and gated by `prizmkit-code-review`.
-- The optional Reviewer must be structurally read-only, unable to execute arbitrary commands or downstream execution, and natively resumable as the same unit; otherwise strict downgrade applies.
-- Direct reading, searching, editing, and testing by the current Main Agent remain allowed.
-- `review-report.md` is the only persisted review artifact; do not append separate Review Notes to another artifact.
-
-Missing required evidence, an unsafe repair, a failed verification, or failure to converge by round ten produces `NEEDS_FIXES`.
+Missing required evidence, an unsafe repair, a failed verification, or failure to converge under the review contract produces `NEEDS_FIXES`.
 
 **Gate Check — Final Review Result**:
 

package/bundled/dev-pipeline/templates/sections/refactor-reminders.md

@@ -3,7 +3,8 @@
 - Use L1 skills: `/prizmkit-plan`, `/prizmkit-implement`, `/prizmkit-code-review`, `/prizmkit-retrospective`, `/prizmkit-committer`.
 - All refactor skills use `artifact_dir=.prizmkit/refactor/{{REFACTOR_ID}}/`.
 - Behavior preservation is the first priority.
-- Do not spawn a top-level Dev implementation subagent; Code Review keeps mandatory Main-Agent ownership and may use only its strict-gated skill-owned Reviewer after convergence.
+- Follow the active skills and runtime contracts; they determine execution topology, review ownership, and delegation boundaries
+- On execution-unit timeout, preserve the active checkout and artifacts and follow the owning contract's recovery or downgrade path
 - Main orchestrator runs `/prizmkit-code-review` directly.
 - Commit with `refactor(<scope>):`, not `feat:` or `fix:`.
 - Checkpoint state is the recovery truth; skipped steps must be marked `skipped`.

package/bundled/dev-pipeline/templates/sections/subagent-timeout-recovery.md

@@ -1,8 +1,9 @@
-## Normal Work Delegation Timeout Recovery
+## Execution-Unit Timeout Recovery
 
-This recovery path applies only to normal work delegated outside the optional skill-owned review contract. Code Review never applies this retry procedure to its independent Reviewer; Reviewer creation or native-resume failure uses the skill's strict downgrade instead.
+This recovery path applies to any delegated execution unit created by the active skill or runtime. The unit's own skill contract determines whether it may be resumed, replaced, or handled by the Main Agent; do not infer those rules from this prompt.
 
-If a normal work execution unit times out:
+If an execution unit times out:
 1. `{{RUNTIME_HELPER_CMD}} artifact list .prizmkit/specs/{{FEATURE_SLUG}}` — check what exists
 2. If `context-snapshot.md` exists: open a recovery prompt with `"Read .prizmkit/specs/{{FEATURE_SLUG}}/context-snapshot.md for project context and the Implementation Log. Run git diff HEAD to see actual code changes already made. Do NOT re-read individual source files unless the File Manifest directs you to."` + only remaining steps + `model: "lite"`
-3. Max 2 retries per phase. After 2 failures, the Main Agent completes the work directly and appends a Recovery Note to context-snapshot.md.
+3. Apply the active skill's retry and continuation contract. Do not create a replacement execution unit when that contract requires native continuation or strict downgrade.
+4. After the allowed recovery attempts are exhausted, the Main Agent continues directly when safe or records `failure-log.md` with the timeout and last observable state.

package/bundled/dev-pipeline/tests/test_checkpoint_state.py

@@ -440,6 +440,53 @@ def test_declared_final_artifact_must_exist_for_semantic_completion(tmp_path, mo
 
 
 
+def test_blocked_test_handoff_discovers_finalized_evidence_paths(tmp_path):
+    artifact = tmp_path / ".prizmkit" / "specs" / "feature"
+    artifact.mkdir(parents=True)
+    evidence = tmp_path / ".prizmkit" / "test" / "evidence" / "evidence-1"
+    evidence.mkdir(parents=True)
+    for name in ("manifest.json", "verdict.json", "validation.json"):
+        (evidence / name).write_text("{}", encoding="utf-8")
+    report = evidence / "test-report.md"
+    report.write_text("blocked", encoding="utf-8")
+    (artifact / "test-report-path.txt").write_text(str(report), encoding="utf-8")
+
+    payload = _family_checkpoint(
+        "feature-pipeline",
+        [
+            "prizmkit-implement", "prizmkit-code-review", "prizmkit-test",
+            "prizmkit-retrospective", "prizmkit-committer", "completion-summary",
+        ],
+        semantic={"artifact_dir": ".prizmkit/specs/feature"},
+    )
+    payload["feature_state"]["artifact_dir"] = ".prizmkit/specs/feature"
+    payload["steps"][1]["stage_result"] = "REVIEW_PASS"
+    payload["steps"][2]["status"] = "in_progress"
+    payload["steps"][2].pop("stage_result")
+    for step in payload["steps"][3:]:
+        step["status"] = "pending"
+        step.pop("stage_result", None)
+    checkpoint = _write(tmp_path / ".prizmkit" / "specs" / "feature" / "workflow-checkpoint.json", payload)
+
+    result = update_checkpoint(
+        str(checkpoint),
+        "prizmkit-test",
+        "failed",
+        semantic_update={
+            "stage_result": "TEST_BLOCKED",
+            "blocked_reason": "test_blocked",
+            "terminal_status": "WORKFLOW_BLOCKED",
+        },
+    )
+
+    assert result["ok"] is True
+    paths = json.loads(checkpoint.read_text(encoding="utf-8"))["steps"][2]["authoritative_evidence_paths"]
+    assert paths["manifest"] == ".prizmkit/test/evidence/evidence-1/manifest.json"
+    assert paths["verdict"] == ".prizmkit/test/evidence/evidence-1/verdict.json"
+    assert paths["validation"] == ".prizmkit/test/evidence/evidence-1/validation.json"
+
+
+
 def test_update_checkpoint_rejects_test_pass_when_validator_replay_fails(tmp_path, monkeypatch):
     paths = _write_test_evidence(tmp_path)
     payload = _family_checkpoint(

package/bundled/dev-pipeline/tests/test_generate_bootstrap_prompt.py

@@ -51,10 +51,8 @@ FORBIDDEN_THREE_STRIKE = "3-" + "strike"
 FORBIDDEN_TWENTY_STEP = "20-" + "step window"
 
 REVIEW_PROMPT_REQUIRED = (
-    "mandatory Main-Agent review",
-    "strict structural capability gate",
-    "skill-owned independent Reviewer",
-    "`review-report.md` is the only persisted review artifact",
+    "review-report.md",
+    "Final Result",
 )
 
 REVIEW_PROMPT_FORBIDDEN = (
@@ -1235,10 +1233,8 @@ class TestDirectOrchestratorImplementationPrompts:
             assert FORBIDDEN_TEST_CMD_PLACEHOLDER not in rendered
             assert FORBIDDEN_THREE_STRIKE not in rendered
             assert FORBIDDEN_TWENTY_STEP not in rendered
-            assert "mandatory Main-Agent review" in rendered
-            assert "up to ten completed rounds" in rendered
-            assert "strict structural capability gate" in rendered
-            assert "skill-owned independent Reviewer" in rendered
+            assert "review-report.md" in rendered
+            assert "Final Result" in rendered
             assert "low=0" not in rendered
             assert "Reviewer 3" not in rendered
 
@@ -1273,7 +1269,7 @@ class TestDirectOrchestratorImplementationPrompts:
         rendered = Path("dev-pipeline/templates/bootstrap-tier3.md").read_text(encoding="utf-8")
 
         assert "/prizmkit-implement" in rendered
-        assert "Implement — Orchestrator Direct" in rendered
+        assert "Implement — Plan Execution" in rendered
         assert "Spawn Dev subagent" not in rendered
         assert "Spawn Dev agent" not in rendered
         assert "Spawn Reviewer agent" not in rendered
@@ -1663,7 +1659,7 @@ class TestFeaturePromptUnifiedFullGuidance:
         prompt = _render_feature_prompt(tmp_path / "fallback-tier3", mode="lite", complexity="low")
 
         assert requested.index("bootstrap-tier3.md") < requested.index("bootstrap-prompt.md") if "bootstrap-prompt.md" in requested else True
-        assert "# Dev-Pipeline Session Bootstrap — Tier 3" in prompt
+        assert "# Dev-Pipeline Session Bootstrap — Full Guidance" in prompt
         assert "bootstrap-tier1.md" not in requested
         assert "bootstrap-tier2.md" not in requested
 
@@ -1931,9 +1927,8 @@ class TestHeadlessPromptCleanupF033:
         refactor_prompt = _render_refactor_prompt(tmp_path / "refactor-mixed", platform="claude")
 
         assert "{{" + "REVIEWER_" + "SUBAGENT_PATH" + "}}" not in replacements
-        assert "mandatory Main-Agent review" in refactor_prompt
-        assert "strict structural capability gate" in refactor_prompt
-        assert "skill-owned independent Reviewer" in refactor_prompt
+        assert "review-report.md" in refactor_prompt
+        assert "Final Result" in refactor_prompt
         assert "Reviewer 3" not in refactor_prompt
 
     def test_bugfix_refactor_explicit_codex_override(self, tmp_path, monkeypatch):
@@ -1955,9 +1950,8 @@ class TestHeadlessPromptCleanupF033:
         refactor_prompt = _render_refactor_prompt(tmp_path / "refactor-codex", platform="claude", explicit_platform="codex")
 
         assert "{{" + "REVIEWER_" + "SUBAGENT_PATH" + "}}" not in replacements
-        assert "mandatory Main-Agent review" in refactor_prompt
-        assert "strict structural capability gate" in refactor_prompt
-        assert "skill-owned independent Reviewer" in refactor_prompt
+        assert "review-report.md" in refactor_prompt
+        assert "Final Result" in refactor_prompt
         assert "Reviewer 3" not in refactor_prompt
 
 

package/bundled/dev-pipeline/tests/test_generate_bugfix_prompt.py

@@ -251,7 +251,9 @@ class TestHeadlessRecoveryReframing:
     def test_bugfix_template_does_not_spawn_monitor_or_require_compact(self):
         content = Path("dev-pipeline/templates/bugfix-bootstrap-prompt.md").read_text(encoding="utf-8")
 
-        assert "Do not spawn persistent background subagents for headless recovery" in content
+        assert "On execution-unit timeout, preserve the active checkout and artifacts" in content
+        assert "follow the owning contract's recovery or downgrade path" in content
+        assert "Do not spawn persistent background subagents for headless recovery" not in content
         assert REMOVED_MAX_LOG_ENV not in content
         assert REMOVED_MAX_LOG_HUMAN not in content
         assert ("209" + "7152") not in content

package/bundled/dev-pipeline/tests/test_python_runner_parity.py

@@ -1007,7 +1007,6 @@ def test_prompt_generation_result_preserves_per_item_model(monkeypatch, tmp_path
                     "checkpoint_path": str(paths.project_root / ".prizmkit" / "bugfix" / "B-001" / "workflow-checkpoint.json"),
                     "model": "per-item-model",
                     "pipeline_mode": "standard",
-                    "agent_count": 3,
                 }
             ),
             stderr="",
@@ -1056,7 +1055,6 @@ def test_prompt_generation_passes_explicit_execution_root_to_generator(monkeypat
                     "checkpoint_path": str(execution_root / ".prizmkit" / "specs" / "001-low" / "workflow-checkpoint.json"),
                     "model": "",
                     "pipeline_mode": "full",
-                    "agent_count": 3,
                 }
             ),
             stderr="",
@@ -1121,7 +1119,6 @@ def _install_runner_session_fakes(monkeypatch, runners, *, statuses=("success",)
             output_path=session_paths.prompt_path,
             model="per-item-model",
             pipeline_mode="full",
-            agent_count=3,
             checkpoint_path=execution_root / ".prizmkit" / "specs" / "001-low" / "workflow-checkpoint.json",
             artifact_path=execution_root / ".prizmkit" / "specs" / "001-low",
             raw={},
@@ -1445,7 +1442,6 @@ def test_explicit_worktree_materializes_ignored_support_assets_before_prompt_and
             output_path=session_paths.prompt_path,
             model="",
             pipeline_mode="full",
-            agent_count=3,
             checkpoint_path=execution_root / ".prizmkit" / "specs" / "001-support" / "workflow-checkpoint.json",
             artifact_path=execution_root / ".prizmkit" / "specs" / "001-support",
             raw={},
@@ -1910,8 +1906,7 @@ def test_foreground_runner_emits_structured_feature_progress(monkeypatch, tmp_pa
     assert "Feature: F-001 — Readable output" in captured.err
     assert "Code retry: 1 / 3" in captured.err
     assert "Preflight: no user-visible changes to preserve before feature task F-001" in captured.err
-    assert "Pipeline mode: full (Tier 3 — Main-Agent Full Guardrails)" in captured.err
-    assert "Agents: 3" in captured.err
+    assert "Pipeline mode: full (Full Guidance)" in captured.err
     assert "Spawning AI CLI session: F-001-session-1" in captured.err
     assert "Session result: success" in captured.err
 

package/bundled/dev-pipeline/tests/test_unified_cli.py

@@ -812,7 +812,7 @@ def test_session_preamble_writes_redacted_start_command_for_all_launch_profiles(
             assert str(prompt) not in "\n".join(lines[:6])
 
 
-def test_headless_review_guidance_uses_main_agent_review_loop():
+def test_headless_review_guidance_defers_to_skill_review_contract():
     headless_guidance_files = [
         REPO_ROOT / "dev-pipeline" / "templates" / "sections" / "phase-review-full.md",
         REPO_ROOT / "dev-pipeline" / "templates" / "bootstrap-tier3.md",
@@ -828,11 +828,9 @@ def test_headless_review_guidance_uses_main_agent_review_loop():
 
     for path in headless_guidance_files:
         text = path.read_text(encoding="utf-8")
-        assert "mandatory Main-Agent review" in text, path
-        assert "up to ten completed rounds" in text, path
+        assert "current review contract" in text, path
+        assert "second review path outside that contract" in text, path
         assert "text final-verdict" in text, path
-        assert "strict structural capability gate" in text, path
-        assert "skill-owned independent Reviewer" in text, path
         assert "low=0" not in text and "Reviewer 3" not in text, path
         assert "forced-worktree changed-content fallback" not in text, path
         assert "isolation:" not in text, path

package/bundled/skills/_metadata.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.1.137",
+  "version": "1.1.139",
   "skills": {
     "prizmkit": {
       "description": "Framework introduction and navigation for the formal single-requirement lifecycle, project initialization, Prizm docs, and independent deployment.",
@@ -72,7 +72,7 @@
       "hasScripts": false
     },
     "prizmkit-test": {
-      "description": "Mandatory post-review auditable test evidence with TEST_PASS/TEST_FAIL/TEST_BLOCKED verdicts, repair-scope routing, differential proof, replay, and deterministic validation.",
+      "description": "Mandatory post-review auditable test evidence with TEST_PASS/TEST_FAIL/TEST_BLOCKED verdicts, repair-scope routing, current-workspace execution evidence, replay, and deterministic validation.",
       "tier": "1",
       "category": "prizmkit-skill",
       "hasAssets": true,