project-tiny-context-harness 0.2.78 → 0.2.80

package/assets/skills/composite-long-task-workflow/references/composite-long-task-workflow-protocol.md

@@ -0,0 +1,633 @@
+# Composite Long-Task Workflow Protocol
+
+## Expected Runtime Effect / 预期实现效果
+
+`composite-long-task-workflow` is Tiny Context's Superpowers-backed composite long-task workflow Skill. It is not the Tiny Context Workflow Contract itself and is not an ordinary target-mode prompt generator. Its job is to combine three upstream authority inputs, Tiny Context workflow rules, project Context, official Superpowers execution methods, canonical task state and acceptance evidence into a recoverable, auditable Codex Goal workflow whose completion can be computed.
+
+The workflow prevents long-running implementation drift across many turns, agents, slices, validators and context compactions: product-intent drift, missing Context updates, scope shrinkage, plan/implementation mismatch, incomplete AC evidence, sampled proof pretending to be full population, passing tests pretending to be acceptance, and audit completion pretending to be product completion.
+
+## Execution Order
+
+The fusion order is fixed:
+
+```text
+Tiny Context Workflow Contract
+-> confirm three-input source authority
+-> compile task-state.json
+-> enter Superpowers implementation slices
+-> each slice updates canonical state and evidence
+-> derive local audit / matrix / verdict / progress / evidence views
+-> run gates
+-> final-gate computes product_goal_complete
+```
+
+## Workflow Identity
+
+This protocol is the detailed execution contract for `composite-long-task-workflow`: a Tiny Context-owned composite workflow adapter for Superpowers-backed long-task execution. It is not the Tiny Context Workflow Contract itself, not a durable project Context file, not a business fact source, not a normal target-mode prompt generator and not an official Superpowers fork.
+
+## Authority Model
+
+Authority is fixed before implementation starts: Product / Architecture Source owns intent, scope and boundaries; Technical Realization Plan owns PI implementation and plan conformance; Acceptance Checklist owns AC completion semantics and proof layers; `task-state.json` is the only execution state source; `events.ndjson` is append-only; `derived/**` is generated reading output only.
+
+## Slice Protocol
+
+Implementation advances through coherent slices. Each slice selects related PI / AC / proof-layer gaps, performs implementation and verification work, records canonical evidence, writes and applies `slice-delta.json`, derives views and runs slice-gate. Shared provider/browser/runtime/security proof environments use epoch-gate instead of repeating the full final gate after every slice.
+
+## Evidence Protocol
+
+Evidence is canonical state, not prose. Every proof record enters `task-state.evidence[]` with evidence id, slice id, type, command or artifact paths, `proves`, `does_not_prove`, freshness, redaction and reviewability / reproduction data. Evidence must be fresh, reviewable and free of secrets, raw credentials, tokens, cookies and long raw payloads.
+
+## Derived Views
+
+`derived/**` contains generated reading views only: local audit, plan-conformance matrix, final acceptance verdict, progress ledger, evidence index, context alignment and final summary. These files help recovery and review, but never rewrite Product / Architecture Source, Technical Realization Plan, Acceptance Checklist or `task-state.json`.
+
+## Gates
+
+The runtime gate sequence is slice-gate for one slice, epoch-gate for shared proof environments and final-gate for product completion. Plan conformance is judged against the Technical Realization Plan, acceptance evidence is judged against the Acceptance Checklist, and final-gate is the only path that computes `product_goal_complete`.
+
+## Required Bootstrap
+
+Every executor first reads `execution-binding.md`, `workflow-protocol.md`, the three input files, `task-state.json` and current `derived/**` views. If state is missing or stale, initialize or compile through `ty-context composite-long-task init <workdir>` and `ty-context composite-long-task compile <workdir>` before choosing the next implementation slice.
+
+## Tiny Context Contract Layer
+
+The workflow uses Context Priority Ladder, Context Delta, Source-to-Context Coverage, Context-to-Implementation Binding, Contract Conformance and Context drift check as the durable-fact and implementation-binding layer. These rules constrain the composite workflow, but the composite workflow does not replace or register itself as the Tiny Context Workflow Contract.
+
+## Superpowers Execution Binding
+
+Superpowers remains the execution layer: prefer `superpowers:subagent-driven-development` when subagents are available, use `superpowers:executing-plans` otherwise, use `superpowers:test-driven-development` for behavior gaps and run `superpowers:verification-before-completion` before completion claims. Tiny Context may wrap Superpowers with authority, conformance and acceptance gates, but must not redefine, duplicate or fork official Superpowers mechanics.
+
+## Final Gate Protocol
+
+Final completion always runs in fixed order: derive all views, run `superpowers:verification-before-completion`, validate canonical state, validate plan acceptance artifacts, run auditor and stale-overclaim checks when applicable, rederive/revalidate if fixes changed state or evidence, then let `ty-context composite-long-task final-gate <workdir>` compute `product_goal_complete`.
+
+## Completion State Machine
+
+`audit_task_complete` means the workflow or audit pass finished. `acceptance_target_status` is the acceptance verdict. `product_goal_complete` is computed only by final-gate and is the only implementation/execution Goal completion condition. A read-only audit goal may finish at audit completion only while saying `Audit workflow completed; acceptance target not complete.` for non-accepted targets.
+
+## Forbidden Shortcuts
+
+Tests alone do not prove plan conformance. Superpowers review does not prove AC acceptance. Sample evidence does not prove full population unless the AC allows it. Derived files, local audit, validator output and auditor reports cannot rewrite Product / Plan / Checklist. Local audit cannot mark product completion. Agents must not handwrite `product_goal_complete`.
+
+## Hallucination Guard
+
+The protocol must prevent false fusion: do not interpret the composite workflow as the Tiny Context Workflow Contract itself; do not register `workflow-protocol.md` in `project_context/context.toml`; do not treat it as a business fact source; do not use local audit, tests, Superpowers review, sampled evidence or final-gate failure as product completion; do not claim full alignment with unresolved Source-to-Context Coverage or Context-to-Implementation Binding gaps; and do not call a Codex implementation Goal complete before final-gate passes.
+
+## Blocker Protocol
+
+Maximize autonomous progress with repository tools, local app/browser sessions, CLI auth, credential helpers and authorized elevation. Stop only for locally unsatisfiable blockers such as MFA, missing permission, unavailable credentials, external approval or legal/system limits, and return the minimal user action list plus the next agent step.
+
+## 1. Materials Entering Agent Context
+
+The executor must see and fuse these materials together:
+
+```text
+1. Tiny Context Workflow Contract
+   - Context Priority Ladder
+   - Context Delta
+   - Source-to-Context Coverage
+   - Context-to-Implementation Binding
+   - Contract Conformance
+   - Context drift check
+
+2. Project durable Context
+   - project_context/global.md
+   - project_context/architecture.md
+   - project_context/context.toml
+   - matching project_context/areas/**/*
+   - DESIGN.md when applicable
+
+3. Three long-task authority inputs
+   - Product / Architecture Source
+   - Technical Realization Plan
+   - Acceptance Checklist
+
+4. Composite workflow protocol artifacts
+   - workflow-protocol.md
+   - execution-binding.md
+   - goal-objective.txt
+
+5. Official Superpowers execution layer
+   - superpowers:subagent-driven-development
+   - superpowers:executing-plans
+   - superpowers:test-driven-development
+   - superpowers:verification-before-completion
+
+6. State and audit kernel
+   - task-state.json
+   - events.ndjson
+   - derived/**
+   - task-state.evidence[]
+   - slice / epoch / final gates
+```
+
+The fusion order is not free-form. The executor first applies the Tiny Context Workflow Contract, then confirms the three-input source authority, then compiles state, then uses Superpowers implementation slices, then updates canonical state/evidence, derives reading views, runs gates and lets final-gate compute completion.
+
+## 2. Phase One: Workflow Contract First
+
+After receiving a Goal, the executor must not start with code. It first applies Tiny Context workflow rules:
+
+```text
+1. Read project_context/global.md, architecture.md, context.toml and relevant area/role Context.
+2. Decide Product Context Delta and Technical Context Delta.
+3. If either is required, update the smallest owning Context before implementation.
+4. Build Source-to-Context Coverage for the three inputs:
+   - whether each source item is covered by existing Context;
+   - whether Context must be added or updated;
+   - whether it is task-local only;
+   - whether it is explicitly out of scope;
+   - whether a user decision is needed.
+5. For high-risk implementation, build Context-to-Implementation Binding:
+   - which surfaces each Context fact must reach;
+   - expected implementation paths;
+   - forbidden shortcuts;
+   - verification paths.
+```
+
+This phase answers whether the task changes durable facts, whether Context supports implementation, which product/architecture/API/schema/state/surface/verification facts must be written first, and which concrete paths and verification entries the implementation must bind to.
+
+If Source-to-Context Coverage still has `new_context_required`, `under_scoped` or `needs_user_decision`, do not claim the plan was fully implemented. If Context-to-Implementation Binding still has `missing`, `partial`, `blocked` or `contradicted_by_current_state`, do not claim Context-to-code alignment.
+
+## 3. Phase Two: Three Inputs Lock Task Authority
+
+The authority relationship is fixed:
+
+```text
+Product / Architecture Source
+= intent, scope, boundaries, owner surface, delivery scope, full population / sample semantics.
+
+Technical Realization Plan
+= PI items, implementation paths, API/schema, state machine, worker/runtime, UI/IA, required tests, plan conformance.
+
+Acceptance Checklist
+= AC items, completion semantics, required proof layers, invalid evidence, fail conditions, acceptance verdict.
+```
+
+`task-state.json` is compiled from these inputs. `derived/**`, local audit, matrix, verdict, validator output and auditor reports cannot rewrite them. Project Context also preserves this authority model: source owns intent/scope/boundaries, plan owns executable blueprint and plan conformance, checklist owns AC completion semantics and proof layers.
+
+## 4. Phase Three: Compile The State Kernel
+
+When initializing or resuming a task, the executor confirms this workdir shape:
+
+```text
+tmp/ty-context/plan-acceptance/<plan-slug>/
+  product-architecture-source.md
+  technical-realization-plan.md
+  acceptance-checklist.md
+  workflow-protocol.md
+  execution-binding.md
+  task-state.json
+  events.ndjson
+  derived/**
+```
+
+If `task-state.json` is absent or uncompiled, use the public command path:
+
+```bash
+ty-context composite-long-task init <workdir>
+ty-context composite-long-task compile <workdir>
+```
+
+Legacy/internal compatibility may exist as an equivalent implementation namespace only:
+
+```bash
+ty-context superpowers init <workdir>
+ty-context superpowers compile <workdir>
+```
+
+The compiled state forms:
+
+```text
+Plan graph:
+  PI -> AC
+  AC -> required proof layers
+  delivery scope
+  sample / full population boundary
+  owner surfaces
+  forbidden shortcuts
+
+State kernel:
+  task-state.json = only execution state source
+  events.ndjson = append-only event log
+  derived/** = generated reading views only
+```
+
+The goal of this phase is to turn natural-language plans into a state-machine-traceable task graph.
+
+## 5. Phase Four: Superpowers Enters Implementation
+
+Superpowers organizes implementation execution:
+
+```text
+- Prefer superpowers:subagent-driven-development when subagents are available.
+- Use superpowers:executing-plans when subagents are unavailable or insufficient.
+- Use superpowers:test-driven-development for behavior changes.
+- Use superpowers:verification-before-completion before any completion claim.
+```
+
+Tiny Context does not copy, fork or override official Superpowers execution mechanics. It wraps them with:
+
+```text
+source authority gate
+plan conformance gate
+acceptance evidence gate
+state consistency gate
+final completion gate
+```
+
+Superpowers manages how to move implementation forward efficiently. Tiny Context checks whether implementation drifted from the source, plan and ACs.
+
+## 6. Phase Five: What An Implementation Slice Is
+
+An implementation slice is not an arbitrary file chunk, page chunk or API chunk. It is the smallest coherent execution unit that closes related gaps.
+
+A slice should:
+
+```text
+1. Bind 2-4 strongly related missing layers.
+2. Usually share one or more of:
+   - same AC;
+   - same PI;
+   - same runtime scenario;
+   - same owner surface;
+   - same proof environment;
+   - same verification path group.
+3. Advance both implementation and evidence.
+4. End by updating task-state and reducing explicit plan/AC/proof gaps.
+```
+
+A slice usually:
+
+```text
+- modifies implementation code;
+- modifies API/schema/state/worker/runtime/UI/IA when required;
+- runs required tests or smoke checks;
+- captures evidence;
+- writes slice-delta.json;
+- applies the slice delta;
+- derives views;
+- runs slice-gate.
+```
+
+A slice cannot only say "some work was done." Its `progress_value` must explain which gap it closed and why that reduces later rework.
+
+## 7. Phase Six: Slice Delta Updates State
+
+After every slice, progress must enter `task-state.json` through structured state update. Do not handwrite derived results and do not report progress only in chat.
+
+`slice-delta.json` must express at least:
+
+```text
+slice_id
+slice_goal
+touched_plan_items
+touched_acs
+code_changes
+evidence_records
+closed_layers
+remaining_layers
+blockers
+cleanup_assertions
+progress_value
+```
+
+Each evidence record enters `task-state.evidence[]` and includes:
+
+```text
+evidence_id
+slice_id
+type
+command
+artifact_paths
+proves
+does_not_prove
+freshness
+redaction
+reviewability / reproduction_steps
+```
+
+`proves` and `does_not_prove` are both required because evidence must say what it proves and what it does not prove. This prevents samples, passing tests, screenshots, mocks or local audit text from being reused as full acceptance.
+
+## 8. Phase Seven: Local Audit And Derived Views
+
+After state changes, run:
+
+```bash
+ty-context composite-long-task derive <workdir>
+```
+
+Legacy/internal compatibility may exist as:
+
+```bash
+ty-context superpowers derive <workdir>
+```
+
+The generated views are:
+
+```text
+derived/local-audit.md
+derived/plan-conformance-matrix.md
+derived/final-acceptance-verdict.md
+derived/progress-ledger.md
+derived/evidence-index.md
+derived/context-alignment.md
+derived/final-summary.md
+```
+
+Their roles:
+
+```text
+local-audit.md
+= recovery view for future sessions or subagents.
+
+plan-conformance-matrix.md
+= whether PIs were implemented, whether evidence maps correctly, and whether implementation drifted from the Technical Plan.
+
+final-acceptance-verdict.md
+= whether ACs satisfy required proof layers, what is missing, and what cannot be accepted.
+
+progress-ledger.md
+= separate progress for AC acceptance, engineering implementation, runtime/proof, system capability, sample, real object, full population and workflow overhead.
+
+evidence-index.md
+= index from evidence_id to proved object, artifact, command and does_not_prove boundary.
+
+context-alignment.md
+= alignment state for Context Delta, Source-to-Context Coverage and Context-to-Implementation Binding.
+
+final-summary.md
+= whether completion is currently possible, why not, and what comes next.
+```
+
+All `derived/**` files are generated views, not authority. They must not be hand-edited as completion evidence. Local audit is not Context, not quality proof and not a global task manager; it is only a recovery and audit view.
+
+## 9. Phase Eight: Slice Gate And Epoch Gate
+
+After each slice, run:
+
+```bash
+ty-context composite-long-task slice-gate <workdir> --slice <slice-id>
+```
+
+Slice gate checks:
+
+```text
+- whether the slice closed a real PI/AC/proof-layer gap;
+- whether fresh reviewable evidence exists;
+- whether evidence entered task-state.evidence[];
+- whether closed_layers are actually proved;
+- whether remaining_layers were not falsely closed;
+- whether blockers are recorded truthfully;
+- whether derived views match task-state.
+```
+
+When multiple slices reuse one provider/browser/runtime/security proof environment, run:
+
+```bash
+ty-context composite-long-task epoch-gate <workdir> --epoch <epoch-id>
+```
+
+Epoch gate validates the shared proof environment in batch, avoids running full final gate after every slice, and prevents shared runtime/browser/provider evidence from being reused after contamination or staleness.
+
+## 10. Phase Nine: Plan Conformance Gate
+
+Plan conformance is judged by the Technical Realization Plan, not by the executor's summary.
+
+Each PI answers:
+
+```text
+- Was the PI actually implemented?
+- Do implementation paths match implementation_paths?
+- Are owner_surfaces correct?
+- Were forbidden_surfaces avoided?
+- Did API/schema/state/runtime/data/UI/IA land according to the Plan?
+- Were required_tests executed or blocked with reason?
+- Can related_acs be traced through evidence?
+```
+
+`derived/plan-conformance-matrix.md` is only a view. The authoritative state is `task-state.json` plus evidence records.
+
+Forbidden substitutions:
+
+```text
+- "code changed" does not prove plan conformance;
+- "tests passed" does not prove PI completion;
+- "Superpowers review passed" does not prove Plan Conformance Gate;
+- convenient current-code paths do not override the Technical Realization Plan.
+```
+
+## 11. Phase Ten: Acceptance Evidence Gate
+
+AC completion is decided by the Acceptance Checklist. Every AC must satisfy its declared `required_proof_layers`.
+
+Proof layers may include:
+
+```text
+code
+api_schema
+worker_runtime
+data_artifact
+ui_browser
+security_redaction
+all_provider_all_runner
+cleanup_stale_scan
+test
+```
+
+AC completion requires:
+
+```text
+1. Every required proof layer has fresh reviewable evidence.
+2. evidence.proves explicitly covers that layer.
+3. evidence.does_not_prove does not expose a scope substitution problem.
+4. No missing required layers.
+5. No material drift.
+6. No stale artifact.
+7. No raw secret/token/cookie/payload leak.
+8. No sibling surface / sample object / mock substitution for owner surface or full population.
+9. When full_population_required=true, sample evidence cannot replace full-population evidence.
+```
+
+This gate enables an external reviewer to follow the evidence chain. Auditor subagents may find gaps but are not proof sources.
+
+## 12. Phase Eleven: Delivery Scope And Full Population Stay Separate
+
+The workflow always distinguishes:
+
+```text
+system_capability_build
+representative_sample_validation
+full_population_operation
+mixed_scope_requires_boundary
+out_of_scope_backlog
+```
+
+Typical forbidden claims:
+
+```text
+- framework complete does not mean all real objects complete;
+- several objects succeeded does not mean automation capability complete;
+- sample provider succeeded does not mean all-provider complete;
+- UI screenshot exists does not mean owner surface primary path is closed;
+- tests passed does not mean AC accepted;
+- local audit passed does not mean product_goal_complete.
+```
+
+If Product / Plan / Checklist disagree on delivery scope, state records:
+
+```text
+scope_conflict_requires_decision
+```
+
+Completion is blocked until the source conflict is resolved. Validators inspect explicit fields; they do not infer business scope from prose.
+
+## 13. Phase Twelve: Fixed Final Gate Order
+
+Before final completion, the order is fixed:
+
+```text
+1. derive all views
+2. superpowers:verification-before-completion
+3. ty-context validate-superpowers-state <workdir>
+4. ty-context validate-plan-acceptance <workdir>
+5. read-only auditor / stale-overclaim scan when applicable
+6. if auditor findings changed state/evidence, derive and validate again
+7. ty-context composite-long-task final-gate <workdir>
+```
+
+Legacy/internal compatibility may exist as:
+
+```text
+ty-context superpowers final-gate <workdir>
+```
+
+Only final-gate computes:
+
+```text
+product_goal_complete=true
+```
+
+Implementation / execution Goals complete only after that computed state.
+
+## 14. Completion Semantics
+
+The workflow distinguishes:
+
+```text
+audit_task_complete
+= whether the audit/reporting task finished.
+
+acceptance_target_status
+= AC acceptance target state.
+
+product_goal_complete
+= whether implementation/execution is truly complete.
+```
+
+Rules:
+
+```text
+1. Do not handwrite product_goal_complete.
+2. product_goal_complete is computed only by final-gate.
+3. audit_task_complete=true is not product completion.
+4. If acceptance_target_status is not complete, do not say Goal achieved.
+5. A read-only audit task may end, but must say:
+   Audit workflow completed; acceptance target not complete.
+6. Implementation / execution Goal mode can call update_goal complete only when product_goal_complete=true.
+```
+
+This must stay visible in Skill and Goal objective because Codex Goal mode can otherwise confuse "audit workflow ended" with "product target accepted."
+
+## 15. Blocker Strategy
+
+The executor maximizes autonomous progress:
+
+```text
+- reuse local app login sessions;
+- reuse browser sessions;
+- reuse CLI auth;
+- reuse OS credential helpers;
+- try authorized sudo / gsudo / administrator elevation first;
+- solve locally discoverable command/page/script/config/test/log issues before pausing.
+```
+
+Only these are user blockers:
+
+```text
+- MFA;
+- account not logged in and cannot self-service login;
+- insufficient permissions;
+- external approval;
+- payment or paid-source authorization;
+- platform policy or legal restriction;
+- credentials or decisions that only the user can supply.
+```
+
+When reporting a blocker, include the minimal user action:
+
+```text
+- exact page/system/command to open;
+- exact field or value location;
+- sensitive values not to send;
+- what the agent will do next;
+- why completion is currently impossible.
+```
+
+## 16. Final Expected Effect
+
+The result is a recoverable long-running loop:
+
+```text
+Tiny Context Workflow Contract
+  -> Context Delta
+  -> Context update or confirmation
+  -> Source-to-Context Coverage
+  -> Context-to-Implementation Binding
+
+Three inputs
+  -> lock product intent, technical plan and acceptance semantics
+  -> compile PI/AC/proof graph
+
+Superpowers
+  -> implementation slices
+  -> multi-agent / TDD / executing-plans implementation
+
+Each slice
+  -> code/API/runtime/UI changes
+  -> evidence capture
+  -> slice-delta update
+  -> apply-slice-delta
+  -> derive audit / matrix / verdict / progress / evidence views
+  -> slice-gate / epoch-gate
+
+Final
+  -> Plan Conformance Gate
+  -> Acceptance Evidence Gate
+  -> External Reviewer / stale-overclaim scan
+  -> final-gate
+  -> product_goal_complete=true before Codex Goal completion
+```
+
+One-sentence definition:
+
+```text
+The expected runtime effect of the composite long-task workflow is to make a Codex agent fuse Tiny Context fact/process constraints, three upstream task authorities, Superpowers long-task execution and a task-state evidence state machine in one context; execution goes Context first, then Plan, then Superpowers slices, and completion is judged by state-backed gates for plan conformance, AC evidence and product_goal_complete so long tasks do not drift in implementation, acceptance or completion claims.
+```
+
+## 17. Forbidden Wrong Fusion / 不允许的错误融合
+
+The workflow must explicitly prevent these interpretations:
+
+```text
+Do not interpret the composite long-task workflow as the Tiny Context Workflow Contract itself.
+Do not register workflow-protocol.md in project_context/context.toml.
+Do not treat workflow-protocol.md as a business fact source.
+Do not let derived/** rewrite Product / Plan / Checklist.
+Do not treat local audit as quality proof.
+Do not treat Superpowers review as plan conformance or AC acceptance.
+Do not treat sample evidence as full-population proof.
+Do not claim full implementation when Context Delta is required but Context is not updated.
+Do not claim full alignment while Source-to-Context Coverage / Context-to-Implementation Binding has unresolved gaps.
+Do not handwrite product_goal_complete.
+Do not call update_goal complete before final-gate passes.
+```

package/assets/skills/normal-long-task/SKILL.md

@@ -19,7 +19,7 @@ Convert a given ordinary long-task source into a strict, project-context-aware a
 For this exact plan, what must be true before a future executor can honestly say the task is complete?
 ```
 
-This Skill defines the acceptance standard. It is not an execution framework. For a dedicated prompt that binds the finished checklist to the external Superpowers workflow, directly invoke `/superpowers-long-task` after this Skill has produced or verified the full checklist.
+This Skill defines the acceptance standard. It is not an execution framework. For the composite workflow that binds the finished checklist to Superpowers-backed execution, directly invoke `/composite-long-task-workflow` after this Skill has produced or verified the full checklist.
 
 ## Required Outputs
 
@@ -59,7 +59,7 @@ Use this Skill through explicit invocation:
 /normal-long-task
 ```
 
-Do not rely on broad automatic keyword routing. If the user needs the Superpowers-specific long-task adapter, use `/superpowers-long-task` after this Skill has produced or verified the full checklist.
+Do not rely on broad automatic keyword routing. If the user needs the Superpowers-backed composite long-task workflow, use `/composite-long-task-workflow` after this Skill has produced or verified the full checklist.
 
 ## Use Cases
 
@@ -264,11 +264,11 @@ If only locally unsatisfiable hard blockers remain, pause for the user or extern
 
 ## Autonomous Progress Protocol
 
-The generated target-mode prompt must require maximum safe autonomous progress within current platform, repository, tool and user-authorized permission boundaries. Do not ask the user for work the executor can safely discover, run, inspect or verify itself.
-
-Before treating account, credential or app access as blocked, open the relevant app, browser page, CLI tool or system setting and try existing app sessions, browser cookies, CLI auth, OS credential helpers or other user-authorized local state. If the existing session is absent, expired, permission-denied or requires login/MFA/approval, then pause with the minimal user action list; do not ask the user to send passwords, tokens, cookies or full sensitive fields.
-
-The generated target-mode prompt must inherit current repository/global `AGENTS.md` or agent-instruction permission policy. Authorized `sudo` / `gsudo` / administrator elevation is not a user blocker; the executor must try it before pausing. Pause only if elevation is unavailable, fails, or requires user/system authorization.
+The generated target-mode prompt must require maximum safe autonomous progress within current platform, repository, tool and user-authorized permission boundaries. Do not ask the user for work the executor can safely discover, run, inspect or verify itself.
+
+Before treating account, credential or app access as blocked, open the relevant app, browser page, CLI tool or system setting and try existing app sessions, browser cookies, CLI auth, OS credential helpers or other user-authorized local state. If the existing session is absent, expired, permission-denied or requires login/MFA/approval, then pause with the minimal user action list; do not ask the user to send passwords, tokens, cookies or full sensitive fields.
+
+The generated target-mode prompt must inherit current repository/global `AGENTS.md` or agent-instruction permission policy. Authorized `sudo` / `gsudo` / administrator elevation is not a user blocker; the executor must try it before pausing. Pause only if elevation is unavailable, fails, or requires user/system authorization.
 
 Pause only for locally unsatisfiable hard blockers such as missing accounts, credentials, production access, paid services, legal/security approval, user-only browser sessions or sensitive fields the executor cannot access safely.
 
@@ -445,11 +445,11 @@ Hard requirements:
 - The prompt must identify the full checklist path immediately after the plan path and say it is the complete acceptance standard. Chinese prompts must include this exact sentence: `该文件是完整验收标准，验收以这个为准。完成前必须逐项检查，不满足则继续实现。` English prompts must say the full checklist is the complete acceptance standard, acceptance is judged against it, and every item must be checked before completion.
 - The prompt must identify a local audit path, normally `tmp/ty-context/plan-acceptance/<plan-slug>-local-audit.md`, and require the future executor to read it before resuming, keep it current during execution, and use it only as target-mode acceptance progress state, not Context or proof.
 - If the prompt uses a compact checklist summary, say the full checklist owns details and acceptance authority; the compact summary owns direction, priority and recovery navigation; overlap with the full checklist is allowed; conflicts are resolved in favor of the full checklist.
-- The prompt must require local audit status to start from `unknown / not_run`; only fresh required evidence can mark an AC complete. If any fresh browser / API / runtime / data / test contradiction appears, downgrade the affected AC and overall status and record invalidating evidence.
-- The prompt must state that UI-facing acceptance requires a real page path and matching user-visible state; component / viewmodel / mock / unit test evidence is auxiliary unless the full checklist explicitly says otherwise.
-- The prompt must require maximum safe autonomous progress within current platform, repository, tool and user-authorized permission boundaries. Do not ask the user for work the executor can safely discover, run, inspect or verify itself. If pausing for a locally unsatisfiable hard blocker, provide the minimum user action list: exact page/system/command/owner, field or value location, redaction guidance, values not to send and what the executor will do next.
-- The prompt must say existing local sessions, browser state, CLI auth and OS credential helpers are self-service resources: open the relevant app/page/tool/settings first, use existing local auth if present, and pause only after access is actually absent, expired, permission-denied or requires login/MFA/approval.
-- The prompt must inherit current repository/global `AGENTS.md` or agent-instruction permission policy. Authorized `sudo` / `gsudo` / administrator elevation is not a user blocker; the executor must try it before pausing. Pause only if elevation is unavailable, fails, or requires user/system authorization.
+- The prompt must require local audit status to start from `unknown / not_run`; only fresh required evidence can mark an AC complete. If any fresh browser / API / runtime / data / test contradiction appears, downgrade the affected AC and overall status and record invalidating evidence.
+- The prompt must state that UI-facing acceptance requires a real page path and matching user-visible state; component / viewmodel / mock / unit test evidence is auxiliary unless the full checklist explicitly says otherwise.
+- The prompt must require maximum safe autonomous progress within current platform, repository, tool and user-authorized permission boundaries. Do not ask the user for work the executor can safely discover, run, inspect or verify itself. If pausing for a locally unsatisfiable hard blocker, provide the minimum user action list: exact page/system/command/owner, field or value location, redaction guidance, values not to send and what the executor will do next.
+- The prompt must say existing local sessions, browser state, CLI auth and OS credential helpers are self-service resources: open the relevant app/page/tool/settings first, use existing local auth if present, and pause only after access is actually absent, expired, permission-denied or requires login/MFA/approval.
+- The prompt must inherit current repository/global `AGENTS.md` or agent-instruction permission policy. Authorized `sudo` / `gsudo` / administrator elevation is not a user blocker; the executor must try it before pausing. Pause only if elevation is unavailable, fails, or requires user/system authorization.
 - The prompt must preserve hard-blocker semantics: if only locally unsatisfiable hard blockers remain, pause for the user or external owner instead of marking the goal complete.
 - The prompt must say that local audit is not Context, not product-quality proof, not a global task manager, and not a replacement for project tests, CI, review, human acceptance, Task Contract or workflow-contract `plan.md`.
 - Do not include explanatory preface inside the prompt.