shapeup-sdlc 3.18.2 → 4.0.0

package/kernel/schemas/domain.schema.json

@@ -3,61 +3,18 @@
   "title": "HarnessDomain",
   "description": "The CENTRAL domain registry of the pure-skill architecture. Every shared field that crosses a skill boundary is defined here exactly once, with its meaning, owner, and storage tier annotated — work-order.schema.json and work-result.schema.json $ref into $defs below instead of re-defining records inline, and no skill may introduce a cross-boundary field that is not registered here first. Annotation keys: x-tier = SHARED (committed under shapeup/, survives clone+crash) | LOCAL (gitignored under .shapeup/, regenerable run-trace) | EMBEDDED (a record type that only lives inside another entity); x-location = the canonical path; x-writer = the single component allowed to write it; x-readers = who consumes it. The x-erd block is the machine-readable entity-relationship map; x-payload-by-worker is the authoritative table of which WorkOrder payload fields each worker may rely on.",
   "x-erd": {
-    "description": "Relationship map. Cardinality reads left-to-right (WorkOrder 1:1 WorkResult = every order has exactly one result). Join keys: <slug> (the feature) is the aggregate root every path is keyed off; scope_id is the STABLE cross-machine key (boards regenerate; hill shards, T0 history and branches join on it); TASK-NNN ids are machine-local and must never be joined across machines (board regeneration joins on scope, not task id).",
+    "description": "Relationship map. Cardinality reads left-to-right (WorkOrder 1:1 WorkResult = every order has exactly one result). Join keys: <slug> (the feature) is the aggregate root every path is keyed off; scope_id is the STABLE cross-machine key (boards regenerate; T0 history and branches join on it); TASK-NNN ids are machine-local and must never be joined across machines (board regeneration joins on scope, not task id).",
     "external": {
       "WorkOrder": "work-order.schema.json",
       "WorkResult": "work-result.schema.json"
     },
-    "projection": {
-      "description": "How `kernel/reduce/graph.mjs`'s node vocabulary maps onto this catalog. The projection uses short names on purpose — a graph is read by hand — so the mapping is declared rather than inferred. A `type` of null is a KNOWN GAP: the projection emits that node and this schema has never typed it. The structural suite asserts this map is TOTAL against the node types the projection actually emits, so a new node type cannot appear without either a type or an explicit gap.",
-      "nodes": {
-        "Run": {
-          "type": null,
-          "gap": "the run receipt's own record — emitted by reduce graph, never typed here"
-        },
-        "Order": {
-          "type": "WorkOrder",
-          "external": true
-        },
-        "Result": {
-          "type": "WorkResult",
-          "external": true
-        },
-        "Verdict": {
-          "type": "Verdict"
-        },
-        "Trial": {
-          "type": "TrialRow"
-        },
-        "GateDecision": {
-          "type": null,
-          "gap": "a gate decision row — emitted by reduce graph, never typed here"
-        },
-        "Leg": {
-          "type": null,
-          "gap": "a leg-completion row (reduce ingest's record that a result was applied) — emitted by reduce graph, never typed here"
-        },
-        "Scope": {
-          "type": "ScopeContract"
-        },
-        "UseCase": {
-          "type": "UseCase"
-        },
-        "Requirement": {
-          "type": "RequirementClause"
-        },
-        "Seam": {
-          "type": "Seam"
-        }
-      }
-    },
     "relationships": [
       {
         "from": "WorkOrder",
         "to": "WorkResult",
         "cardinality": "1:1",
         "via": "order_id",
-        "note": "the envelope port — harness compile emits, worker answers, harness reduce ingest applies"
+        "note": "the envelope port — the loop writes, the worker answers, the loop applies"
       },
       {
         "from": "WorkOrder",
@@ -71,7 +28,7 @@
         "to": "TaskRef",
         "cardinality": "1:N",
         "via": "payload.tasks[]",
-        "note": "parsed from the LOCAL board by compile-order, never by the worker"
+        "note": "read from the LOCAL board by the loop, never by the worker"
       },
       {
         "from": "TaskRef",
@@ -85,7 +42,7 @@
         "to": "RequirementClause",
         "cardinality": "N:0..N",
         "via": "acceptance_criteria[].covers[]",
-        "note": "the covers-closure anchor — same sanctioned LOCAL→SHARED direction as use_case_refs. trace-lint asserts every status:covered REQ-id is named by ≥1 AC's covers[]; a REQ neither covered nor CUT is red. REQ-ids are stable cross-machine keys (supersede-never-delete), never renumbered like TASK-NNN"
+        "note": "the covers-closure anchor — same sanctioned LOCAL→SHARED direction as use_case_refs. the planning read-back asserts every status:covered REQ-id is named by ≥1 AC's covers[]; a REQ neither covered nor CUT is red. REQ-ids are stable cross-machine keys (supersede-never-delete), never renumbered like TASK-NNN"
       },
       {
         "from": "CriterionVerdict",
@@ -106,14 +63,14 @@
         "to": "UseCase",
         "cardinality": "1:N",
         "via": "entries[].use_case",
-        "note": "reachability map: per UC engine → wiring seam → entry-point call site → player-visible affordance. trace-lint asserts each UC's engine reaches ProjectProfile.entry_point via the import graph; an unreachable engine (0 import sites) is red"
+        "note": "wiring map: per UC engine → wiring seam → entry-point call site → player-visible affordance, read by the scopes substep and the evaluator"
       },
       {
         "from": "WiringMap",
         "to": "ProjectProfile",
         "cardinality": "N:1",
         "via": "entry_point resolution",
-        "note": "reachability resolves entry_point from the profile (archetype-specific: main.js for a game is not the seam for a web-service) — never hardcoded"
+        "note": "the wire step resolves entry_point from the profile (archetype-specific: main.js for a game is not the seam for a web-service) — never hardcoded"
       },
       {
         "from": "WorkOrder",
@@ -146,14 +103,14 @@
         "to": "TaskRef",
         "cardinality": "N:1",
         "via": "task_id",
-        "note": "ingest ticks AC boxes, flips frontmatter status, appends the Execution Log"
+        "note": "the loop ticks AC boxes, flips frontmatter status, appends the Execution Log"
       },
       {
         "from": "WorkResult",
         "to": "Discovery",
         "cardinality": "1:N",
         "via": "discoveries[]",
-        "note": "ingest appends to discovery/ledger.md — three producers (executor +, QA ~, planner overflow), zero direct writers"
+        "note": "the loop appends to discovery/ledger.md — three producers (executor +, QA ~, planner overflow), zero direct writers"
       },
       {
         "from": "WorkResult",
@@ -167,14 +124,14 @@
         "to": "CriterionVerdict",
         "cardinality": "1:N",
         "via": "criteria[]",
-        "note": "ingest appends to evaluation/.verdicts-<target>.jsonl (append-only; flips force confidence low)"
+        "note": "the loop appends to evaluation/.verdicts-<target>.jsonl (append-only; flips force confidence low)"
       },
       {
         "from": "Verdict",
         "to": "RefutedAc",
         "cardinality": "1:N",
         "via": "refuted[]",
-        "note": "ingest un-ticks the AC box and stamps eval_verdict: fail"
+        "note": "the loop un-ticks the AC box and stamps eval_verdict: fail"
       },
       {
         "from": "Verdict",
@@ -231,13 +188,6 @@
         "cardinality": "1:N",
         "via": "scope_id, one per attempt"
       },
-      {
-        "from": "ScopeContract",
-        "to": "HillShard",
-        "cardinality": "1:0..1",
-        "via": "scope_id",
-        "note": "phase derived from T0/T1 facts, never authored"
-      },
       {
         "from": "ScopeContract",
         "to": "ScopeContract",
@@ -285,35 +235,7 @@
         "to": "Seam",
         "cardinality": "1:N",
         "via": "wiring-map entries[].wiring_seam",
-        "note": "projected by reduce graph as UseCase -DEPENDS_ON-> Seam. NOTE: the projection reads `row.seam`/`row.entry_point` while WiringEntry declares `wiring_seam`/`entry_call_site` — see harness-defects"
-      },
-      {
-        "from": "RoundBuildVerdict",
-        "to": "ProjectProfile",
-        "cardinality": "N:1",
-        "via": "build_probe + launch_probe",
-        "note": "the gate runs the probes the profile declares; run_cmd comes from the run ledger"
-      },
-      {
-        "from": "RoundBuildVerdict",
-        "to": "AegisTriple",
-        "cardinality": "1:N",
-        "via": "discovered_tasks[]",
-        "note": "a red gate's output, digested — surfaces as payload.bugs on the next round's orders"
-      },
-      {
-        "from": "WorkOrder",
-        "to": "RoundBuildVerdict",
-        "cardinality": "N:1",
-        "via": "payload.build_gate",
-        "note": "an evaluate order names this run's newest gate artifact for its round, green or red, so the judge knows the build ran and the app launched before grading a [ui] row; payload.launch_cmd carries the profile's launch_probe beside it"
-      },
-      {
-        "from": "RoundBuildVerdict",
-        "to": "HillShard",
-        "cardinality": "1:N",
-        "via": "round",
-        "note": "a red gate withholds DOWNHILL_EXECUTION from every T0-green verdict of that round"
+        "note": "a use case depends on the seam its engine attaches through: the `wiring_seam` cell of its wiring-map row"
       }
     ]
   },
@@ -330,31 +252,6 @@
       "constraints",
       "bugs"
     ],
-    "ba-pitch-analyzer": [
-      "pitch",
-      "breadboard",
-      "lens",
-      "orient_dir",
-      "spec_folder",
-      "feature",
-      "discovered_ledger",
-      "requirements",
-      "kb_rules_path"
-    ],
-    "scope-architect": [
-      "feature",
-      "spec_folder",
-      "tasks",
-      "breadboard",
-      "kb_rules_path"
-    ],
-    "solution-architect": [
-      "feature",
-      "spec_folder",
-      "project_profile",
-      "breadboard",
-      "kb_rules_path"
-    ],
     "spec-evaluator": [
       "spec_folder",
       "feature",
@@ -386,19 +283,12 @@
       "ledger",
       "kb_rules_path"
     ],
-    "translator": [
-      "intake",
-      "glossary"
-    ],
-    "scope-hammer": [
+    "building": [
       "feature",
-      "baseline",
-      "breaker",
-      "scope_id"
-    ],
-    "coach": [
-      "feedback",
-      "stack"
+      "spec_folder",
+      "step",
+      "mode",
+      "kb_rules_paths"
     ]
   },
   "x-result-by-worker": {
@@ -418,25 +308,6 @@
       "assumptions",
       "deviations"
     ],
-    "ba-pitch-analyzer": [
-      "discoveries",
-      "files_touched",
-      "artifacts",
-      "assumptions",
-      "deviations"
-    ],
-    "scope-architect": [
-      "files_touched",
-      "artifacts",
-      "assumptions",
-      "deviations"
-    ],
-    "solution-architect": [
-      "files_touched",
-      "artifacts",
-      "assumptions",
-      "deviations"
-    ],
     "orient": [
       "files_touched",
       "artifacts",
@@ -450,69 +321,39 @@
       "assumptions",
       "deviations"
     ],
-    "translator": [
-      "files_touched",
-      "artifacts",
-      "assumptions",
-      "deviations"
-    ],
-    "scope-hammer": [
-      "files_touched",
-      "artifacts",
-      "assumptions",
-      "deviations"
-    ],
-    "coach": [
-      "files_touched",
+    "building": [
       "artifacts",
-      "assumptions",
       "deviations"
     ]
   },
   "$defs": {
     "WorkerName": {
-      "description": "The complete worker roster — the only skills a WorkOrder may be addressed to. tech-lead and shapeup are deliberately absent (orchestrator and PO-personal shaping are not workers).",
+      "description": "The complete worker roster — the only skills a dispatch may be addressed to. building (the loop) and shapeup are deliberately absent (the orchestrator and PO-personal shaping are not workers); the loop appears in an order only as the `worker` of a fence-only `plan` order, which the order schema accepts beside this roster.",
       "type": "string",
       "enum": [
         "task-executor",
         "spec-evaluator",
-        "ba-pitch-analyzer",
-        "scope-architect",
-        "solution-architect",
         "orient",
-        "qa-edge-hunter",
-        "translator",
-        "scope-hammer",
-        "coach"
+        "qa-edge-hunter"
       ]
     },
     "Operation": {
-      "description": "The full operation vocabulary. Replaces lifecycle flags (--tasks-only, --from-discovered, --map-scopes …): the caller knows the pipeline position; the worker never re-derives it. Ownership: execute/fix/spike = task-executor · analyze/reconcile/retrofit-surface/coverage = ba-pitch-analyzer · map-scopes = scope-architect · wire = solution-architect · evaluate = spec-evaluator · orient = orient · hunt = qa-edge-hunter · translate = translator · hammer = scope-hammer · coach/scan/research = coach (scan seeds the knowledge base from the project on disk instead of from L4 feedback; research seeds it from the platform's official documentation, aimed by a stack hint, and cross-checks the scan's rules where a scan exists; same write surface, same categorization gate).",
+      "description": "The full operation vocabulary. Replaces lifecycle flags (--tasks-only, --from-discovered, --map-scopes …): the caller knows the pipeline position; the worker never re-derives it. Ownership: execute/fix/spike = task-executor · plan = the loop itself, a fence-only order no sub-agent answers (one per planning substep: requirements, spec, wire, scopes) · evaluate = spec-evaluator · orient = orient · hunt = qa-edge-hunter. The stop census, the retro and the intake's language gate are the loop's own acts and carry no order at all.",
       "type": "string",
       "enum": [
         "execute",
         "fix",
         "spike",
-        "analyze", "board",
-        "reconcile",
-        "retrofit-surface",
-        "coverage",
-        "map-scopes",
-        "wire",
         "evaluate",
         "orient",
         "hunt",
-        "translate",
-        "hammer",
-        "coach",
-        "scan",
-        "research"
+        "plan"
       ]
     },
     "Substrate": {
-      "description": "The write contract of one order — mode/flag differences ARE write-contract differences (one whitelist template per operation, compile-order substrateFor()). Enforced mechanically by the sandbox hook; a worker needing a file outside it must ESCALATE (substrate-expansion), never write.",
+      "description": "The write contract of one order — mode/flag differences ARE write-contract differences (one whitelist template per operation, the loop substrateFor()). Enforced mechanically by the sandbox hook; a worker needing a file outside it must ESCALATE (substrate-expansion), never write.",
       "x-tier": "EMBEDDED",
-      "x-writer": "harness compile (templates) / scope-architect (per-scope globs)",
+      "x-writer": "the loop (templates in its orders resource) / the loop's plan activity, scopes substep (per-scope globs)",
       "type": "object",
       "properties": {
         "allowed": {
@@ -548,7 +389,7 @@
           "items": {
             "type": "string"
           },
-          "description": "Paths this order may write DESPITE a broader freeze — the compiler's grant, derived from the order's own identity and never requested by a worker. For a build leg: its own WorkResult (no sibling's — a leg that can write another's can report work nobody did), its task files, the discovery ledger, its spikes. Checked BEFORE `frozen`, and only against the contract that declared it, so another live order's exception never licenses this write."
+          "description": "Paths this order may write DESPITE a broader freeze — the loop's grant, derived from the order's own identity and never requested by a worker. For a build leg: its own WorkResult (no sibling's — a leg that can write another's can report work nobody did), its task files, the discovery ledger, its spikes. Checked BEFORE `frozen`, and only against the contract that declared it, so another live order's exception never licenses this write."
         }
       }
     },
@@ -568,9 +409,9 @@
       }
     },
     "TaskRef": {
-      "description": "One task as carried inside a WorkOrder — parsed from the LOCAL board file (.shapeup/<slug>/tasks/TASK-*.md frontmatter + AC checkboxes) by compile-order parseTaskFile(). NOTE: task ids are machine-local (boards regenerate and renumber); never join on id across machines — the scope is the stable key.",
+      "description": "One task as carried inside a WorkOrder — parsed from the LOCAL board file (.shapeup/<slug>/tasks/TASK-*.md frontmatter + AC checkboxes) by the loop parseTaskFile(). NOTE: task ids are machine-local (boards regenerate and renumber); never join on id across machines — the scope is the stable key.",
       "x-tier": "EMBEDDED",
-      "x-writer": "harness compile (from the board ba-pitch-analyzer generated)",
+      "x-writer": "the loop (from the board the plan activity generated)",
       "type": "object",
       "required": [
         "id"
@@ -589,7 +430,7 @@
         },
         "acceptance_criteria": {
           "type": "array",
-          "description": "The AC checkbox texts, verbatim — ingest ticks boxes by matching this text back. ADDITIVE union (spine v1.3): a plain `string` (legacy boards, unchanged) OR `{text, covers?}` when the board line carries a `(covers: REQ-…)` clause. `.text` stays BYTE-IDENTICAL to the checkbox so ingest-result's substring tick-back (AcResult.ac) is untouched; `covers[]` is the LOCAL→SHARED anchor trace-lint reads for covers-closure. A pre-covers board keeps parsing as string[] (the ✦ non-regression invariant).",
+          "description": "The AC checkbox texts, verbatim — the loop ticks boxes by matching this text back. ADDITIVE union (spine v1.3): a plain `string` (legacy boards, unchanged) OR `{text, covers?}` when the board line carries a `(covers: REQ-…)` clause. `.text` stays BYTE-IDENTICAL to the checkbox so the loop's substring tick-back (AcResult.ac) is untouched; `covers[]` is the LOCAL→SHARED anchor the planning read-back reads for covers-closure. A pre-covers board keeps parsing as string[] (the ✦ non-regression invariant).",
           "items": {
             "anyOf": [
               {
@@ -611,7 +452,7 @@
                       "type": "string",
                       "pattern": "^REQ-[0-9]+$"
                     },
-                    "description": "REQ-ids this AC covers — resolved against the SHARED requirements registry by trace-lint."
+                    "description": "REQ-ids this AC covers — resolved against the SHARED requirements registry by the planning read-back."
                   }
                 }
               }
@@ -631,7 +472,7 @@
           "items": {
             "type": "string"
           },
-          "description": "Explicit dependencies. The inverse (unlocks) is ALWAYS derived by harness reduce board, never hand-authored — hand-authored inverses drift asymmetric, observed repeatedly."
+          "description": "Explicit dependencies. The inverse (unlocks) is ALWAYS derived by the loop, never hand-authored — hand-authored inverses drift asymmetric, observed repeatedly."
         },
         "use_case_refs": {
           "type": "array",
@@ -642,7 +483,7 @@
         },
         "scope_id": {
           "type": "string",
-          "description": "OPTIONAL: the scope that builds this task. The DISAMBIGUATOR, not the primary link — dispatch normally derives a scope's tasks by intersecting the contract's use_cases[] with this task's use_case_refs[], and that is a partition only while each scope owns its own use cases. When several scopes implement one use case (a four-scope, one-UC cut is ordinary) the UC anchor cannot say who builds what and every scope claims every task; spec-lint SCOPE-PARTITION reds that, and this field resolves it. Same sanctioned LOCAL→SHARED direction as use_case_refs: the volatile board names the stable scope_id, never the reverse."
+          "description": "OPTIONAL: the scope that builds this task. The DISAMBIGUATOR, not the primary link — dispatch normally derives a scope's tasks by intersecting the contract's use_cases[] with this task's use_case_refs[], and that is a partition only while each scope owns its own use cases. When several scopes implement one use case (a four-scope, one-UC cut is ordinary) the UC anchor cannot say who builds what and every scope claims every task; the planning read-back reds that, and this field resolves it. Same sanctioned LOCAL→SHARED direction as use_case_refs: the volatile board names the stable scope_id, never the reverse."
         }
       }
     },
@@ -650,7 +491,7 @@
       "description": "One adjudicated ESCALATE answer as carried inside a WorkOrder — binding precedent the worker must apply. Compiled from the committed round-ledger.md Decisions table (columns: Round | Scope | Kind | Question | Answer | Resolved by) filtered to this scope. The full row lives in the ledger; the envelope carries the minimal {id, answer} projection.",
       "x-tier": "EMBEDDED (projection of the SHARED round-ledger.md Decisions row)",
       "x-location": ".shapeup/<slug>/round-ledger.md",
-      "x-writer": "tech-lead — promoted the instant the PO gives an answer",
+      "x-writer": "the operator — a PO answer to a blocked worker is filed here by hand, the instant it is given; no kernel step or loop step writes this file (the loop reads it)",
       "type": "object",
       "required": [
         "id",
@@ -668,9 +509,9 @@
       }
     },
     "AegisTriple": {
-      "description": "One digested failure — harness probe digest distills raw build/test/Playwright logs into these so the next attempt gets a few lines of signal instead of a stack-trace dump. Appears as T0Artifact.discovered_tasks[] (red attempts) and as WorkOrder payload.digested_errors[] (the next attempt's starting bug list).",
+      "description": "One digested failure — the failure digester distills raw build/test/Playwright logs into these so the next attempt gets a few lines of signal instead of a stack-trace dump. Appears as T0Artifact.discovered_tasks[] (red attempts) and as WorkOrder payload.digested_errors[] (the next attempt's starting bug list).",
       "x-tier": "EMBEDDED",
-      "x-writer": "harness probe digest (regex pass; Sonnet fallback only on unrecognized formats)",
+      "x-writer": "the failure digester, called by harness verify t0 (regex pass only)",
       "type": "object",
       "properties": {
         "file": {
@@ -762,8 +603,8 @@
       "description": "One use case — the STABLE anchor both tiers name, and the only identifier the scope↔task relation is re-derived through. A UC id is assigned once and frozen: it behaves like scope_id and REQ-id, never like TASK-NNN. Referenced three ways across the tree (`UC-x`, `[[UC-x]]`, `[[usecases/UC-x]]`); `kernel/lib/contract.mjs` ucId() is the single normaliser, and both sides of any join must pass through it or they disagree about a UC they both hold.",
       "x-tier": "SHARED",
       "x-location": "shapeup/<slug>/spec/usecases/UC-*.md",
-      "x-writer": "ba-pitch-analyzer (operation: analyze; reconcile MAY append, never renumber)",
-      "x-readers": "scope-architect (use_cases[]), solution-architect (wiring-map entries), spec-evaluator (the grading criterion), harness verify spec (SCOPE-ANCHOR + UC-ANCHOR), harness reduce graph",
+      "x-writer": "the loop's plan activity, spec substep (a reconcile pass MAY append, never renumber)",
+      "x-readers": "the plan activity (scopes: use_cases[]; wire: wiring-map entries), spec-evaluator (the grading criterion), the loop's planning read-back (SCOPE-ANCHOR + UC-ANCHOR)",
       "type": "object",
       "required": [
         "id"
@@ -787,11 +628,11 @@
       }
     },
     "ScopeContract": {
-      "description": "A vertical scope as a committed, mechanically enforceable contract — Shape Up's 'map the scopes' as data. Sliced by business flow (one call chain: UI screen + API route + use case + repository), NEVER by directory (PA1). The sandbox hook enforces the substrate, t0-verify runs the fixtures, the evaluator asserts against the manifest. Superseded contracts are kept, never deleted (branch and T0 history stay attributable). ON-DISK FORMAT IS MARKDOWN (ADR-0001): frontmatter carries the scalars and [a, b] lists, a markdown table carries the one array-of-objects field, and prose carries the rationale a reviewer reads. THIS SCHEMA DESCRIBES THE PARSED OBJECT — the wire form embedded in the WorkOrder envelope — not the file. `kernel/lib/contract.mjs` is the only reader/writer of the file form; everything downstream of that parse sees exactly this shape.",
+      "description": "A vertical scope as a committed, mechanically enforceable contract — Shape Up's 'map the scopes' as data. Sliced by business flow (one call chain: UI screen + API route + use case + repository), NEVER by directory (PA1). The sandbox hook enforces the substrate, t0-verify runs the fixtures, the evaluator asserts against the manifest. Superseded contracts are kept, never deleted (branch and T0 history stay attributable). ON-DISK FORMAT IS MARKDOWN: frontmatter carries the scalars and [a, b] lists, a markdown table carries the one array-of-objects field, and prose carries the rationale a reviewer reads. THIS SCHEMA DESCRIBES THE PARSED OBJECT — the wire form embedded in the WorkOrder envelope — not the file. `kernel/lib/contract.mjs` is the only reader/writer of the file form; everything downstream of that parse sees exactly this shape.",
       "x-tier": "SHARED",
       "x-location": "shapeup/<slug>/scopes/<scope-id>.md",
-      "x-writer": "scope-architect (SOLE writer — a hand-edit anywhere else is a defect)",
-      "x-readers": "harness compile, sandbox-guard hook, harness verify t0, harness verify spec, spec-evaluator, scope-hammer, tech-lead",
+      "x-writer": "the loop's plan activity, scopes substep (SOLE writer — a hand-edit anywhere else is a defect)",
+      "x-readers": "the loop, sandbox-guard hook, harness verify t0, the loop's planning read-back, spec-evaluator, the stop census, the loop",
       "type": "object",
       "required": [
         "scope_id"
@@ -815,7 +656,7 @@
           "items": {
             "type": "string"
           },
-          "description": "The COMMITTED use cases this scope implements (`UC-*`, resolving to spec/usecases/UC-*.md) — the scope's anchor into the spec and the join the scope↔task relation is re-derived through. Mirrors the board's own `use_case_refs` in the sanctioned LOCAL→SHARED direction. This REPLACES the former `tasks[]` id list: a contract is committed and a board is not, so naming task ids put a pointer into a gitignored, per-machine tier that resolved to nothing on every other clone without a single check going red. spec-lint SCOPE-ANCHOR reds an empty or unresolvable anchor."
+          "description": "The COMMITTED use cases this scope implements (`UC-*`, resolving to spec/usecases/UC-*.md) — the scope's anchor into the spec and the join the scope↔task relation is re-derived through. Mirrors the board's own `use_case_refs` in the sanctioned LOCAL→SHARED direction. This REPLACES the former `tasks[]` id list: a contract is committed and a board is not, so naming task ids put a pointer into a gitignored, per-machine tier that resolved to nothing on every other clone without a single check going red. the planning read-back reds an empty or unresolvable anchor."
         },
         "covers": {
           "type": "array",
@@ -843,7 +684,7 @@
           "items": {
             "type": "string"
           },
-          "description": "Files ≥2 scopes both touch — must be declared in BOTH scopes' lists (spec-lint DISJOINT); declaring one costs concurrency, since two scopes that share a path build one at a time."
+          "description": "Files ≥2 scopes both touch — must be declared in BOTH scopes' lists (the DISJOINT rule); declaring one costs concurrency, since two scopes that share a path build one at a time."
         },
         "affordance_manifest": {
           "type": "array",
@@ -882,15 +723,15 @@
         },
         "business_goal": {
           "type": "string",
-          "description": "What a user can do when this scope ships — the must-have trace scope-hammer's census checks against."
+          "description": "What a user can do when this scope ships — the must-have trace the stop census checks against."
         }
       }
     },
     "ScopeBoard": {
-      "description": "The scope board — a HUMAN-READABLE PROJECTION of the contracts, not a source. Every column restates something `scopes/*.md` already declares, so it can be regenerated from them and deleting it loses nothing. It deliberately carries no `wave` column: waves are Kahn levels of `depends_on` and `probe resume` derives them, and a hand-authored copy of a derived value is the same defect as the hand-authored `unlocks` that `deriveUnlocks` exists to prevent. Nothing parses this file — that is only safe while it stays a view; the moment it holds a fact of its own it needs a reader and a lint like every other contract.",
+      "description": "The scope board — a HUMAN-READABLE PROJECTION of the contracts, not a source. Every column restates something `scopes/*.md` already declares, so it can be regenerated from them and deleting it loses nothing. It deliberately carries no `wave` column: waves are Kahn levels of `depends_on` and the loop derives them, and a hand-authored copy of a derived value is the same defect as the hand-authored `unlocks` that `deriveUnlocks` exists to prevent. Nothing parses this file — that is only safe while it stays a view; the moment it holds a fact of its own it needs a reader and a lint like every other contract.",
       "x-tier": "SHARED",
       "x-location": "shapeup/<slug>/scope-board.md",
-      "x-writer": "scope-architect (regenerated whenever the contracts change)",
+      "x-writer": "the loop's plan activity, scopes substep (regenerated whenever the contracts change)",
       "x-readers": "humans, in a pull request. No code reads it — by design.",
       "type": "object",
       "properties": {
@@ -904,7 +745,7 @@
       }
     },
     "AcResult": {
-      "description": "One acceptance criterion's outcome with evidence. 'ac' carries the checkbox text VERBATIM — ingest ticks boxes by substring-matching it. No recorded evidence = the worker reports fail by its own hand.",
+      "description": "One acceptance criterion's outcome with evidence. 'ac' carries the checkbox text VERBATIM — the loop ticks boxes by substring-matching it. No recorded evidence = the worker reports fail by its own hand.",
       "x-tier": "EMBEDDED",
       "type": "object",
       "required": [
@@ -931,7 +772,7 @@
       }
     },
     "TaskResult": {
-      "description": "Per-task outcome inside a WorkResult. ingest-result flips the board row, ticks pass ACs, sets frontmatter status/completed_at, and appends the Execution Log from these entries — the worker itself writes none of that.",
+      "description": "Per-task outcome inside a WorkResult. the loop flips the board row, ticks pass ACs, sets frontmatter status/completed_at, and appends the Execution Log from these entries — the worker itself writes none of that.",
       "x-tier": "EMBEDDED",
       "type": "object",
       "required": [
@@ -988,11 +829,11 @@
       }
     },
     "Discovery": {
-      "description": "The universal currency of surprise: one raw discovered line. Producers: task-executor (marker +, P3.7), qa-edge-hunter (always ~, repro required), ba-pitch-analyzer (overflow reports). NO producer writes the ledger — ingest-result appends every entry to discovery/ledger.md (single-writer, mechanically). Promotion ~ → must-have is always a human act at SHIP S.0/GATE H.",
+      "description": "The universal currency of surprise: one raw discovered line. Producers: task-executor (marker +, P3.7), qa-edge-hunter (always ~, repro required), the plan activity (overflow reports). NO producer writes the ledger — the loop appends every entry to discovery/ledger.md (single-writer, mechanically). Promotion ~ → must-have is always a human act at SHIP S.0/GATE H.",
       "x-tier": "EMBEDDED (projection into the LOCAL discovery ledger)",
       "x-location": ".shapeup/<slug>/discovery/ledger.md",
-      "x-writer": "harness reduce ingest",
-      "x-readers": "ba-pitch-analyzer (reconcile), scope-architect (map-scopes), scope-hammer (census), qa-edge-hunter (covered-territory context)",
+      "x-writer": "the loop",
+      "x-readers": "the plan activity (spec reconcile mode, scopes), the stop census, qa-edge-hunter (covered-territory context)",
       "type": "object",
       "required": [
         "marker",
@@ -1037,7 +878,7 @@
             "type": "string",
             "pattern": "^REQ-[0-9]+$"
           },
-          "description": "OPTIONAL (spine v1.3) — REQ-ids this finding maps back to. The checkable back-link (LOCAL→SHARED) so an edge case maps to a business requirement by id instead of grepping ledger.md; trace-lint only checks the id resolves in the registry."
+          "description": "OPTIONAL (spine v1.3) — REQ-ids this finding maps back to. The checkable back-link (LOCAL→SHARED) so an edge case maps to a business requirement by id instead of grepping ledger.md; `verify spec` only checks the id resolves in the registry."
         }
       }
     },
@@ -1111,7 +952,7 @@
                 "type": "string",
                 "pattern": "^REQ-[0-9]+$"
               },
-              "description": "OPTIONAL (spine v1.3) — REQ-ids this criterion maps back to. A checkable finding→requirement anchor (LOCAL→SHARED) so the judge's record maps to a business requirement by id; trace-lint only checks each id resolves in the registry. Navigation aid, never a grading input."
+              "description": "OPTIONAL (spine v1.3) — REQ-ids this criterion maps back to. A checkable finding→requirement anchor (LOCAL→SHARED) so the judge's record maps to a business requirement by id; the planning read-back only checks each id resolves in the registry. Navigation aid, never a grading input."
             }
           }
         },
@@ -1152,7 +993,7 @@
             "evidence": {
               "type": "string",
               "pattern": "[\\w./\\-]+:[0-9]+",
-              "description": "A FAIL must carry a file:line locator. The rule used to live in prose and be enforced nowhere — a correct FAIL verdict with no locator anywhere is unactionable without re-investigating (observed, not theorized). Now mechanical: the ingest-side schema validation rejects it before any write."
+              "description": "A FAIL must carry a file:line locator. The rule used to live in prose and be enforced nowhere — a correct FAIL verdict with no locator anywhere is unactionable without re-investigating (observed, not theorized). Now mechanical: the loop's result check rejects it before it applies the result."
             },
             "traces_to": {
               "type": "array",
@@ -1160,14 +1001,14 @@
                 "type": "string",
                 "pattern": "^REQ-[0-9]+$"
               },
-              "description": "OPTIONAL (spine v1.3) — REQ-ids this criterion maps back to. A checkable finding→requirement anchor (LOCAL→SHARED) so the judge's record maps to a business requirement by id; trace-lint only checks each id resolves in the registry. Navigation aid, never a grading input."
+              "description": "OPTIONAL (spine v1.3) — REQ-ids this criterion maps back to. A checkable finding→requirement anchor (LOCAL→SHARED) so the judge's record maps to a business requirement by id; the planning read-back only checks each id resolves in the registry. Navigation aid, never a grading input."
             }
           }
         }
       ]
     },
     "RefutedAc": {
-      "description": "An AC box the judge's evidence disproves. Un-ticking is INGEST's act (the judge never touches a task file): ingest un-ticks the box and stamps eval_verdict: fail + eval_at on the task frontmatter.",
+      "description": "An AC box the judge's evidence disproves. Un-ticking is the loop's act (the judge never touches a task file): the loop un-ticks the box and stamps eval_verdict: fail + eval_at on the task frontmatter.",
       "x-tier": "EMBEDDED",
       "type": "object",
       "required": [
@@ -1258,7 +1099,7 @@
       "x-tier": "LOCAL",
       "x-location": ".shapeup/<slug>/t0/verdicts/r<N>-a<M>-t<T>.json (schema_version 2; the unsuffixed r<N>-a<M>.json of schema_version 1 is still readable)",
       "x-writer": "harness verify t0",
-      "x-readers": "harness compile (next attempt), spec-evaluator (citation), tech-lead (hill derivation, GATE L2.3), scope-hammer (stall census)",
+      "x-readers": "the loop (next attempt), spec-evaluator (citation), the stop census (stall census)",
       "type": "object",
       "properties": {
         "schema_version": {
@@ -1374,11 +1215,11 @@
       ]
     },
     "TrialRow": {
-      "description": "One row per T0 run — the ratchet's history, and the artifact that makes 'is attempt N+1 better than attempt N?' answerable. Append-only (I4: every superseded object remains addressable). baseline_trial is the parent link: that single field IS the experiment DAG (lineage, PARENT_OF, and a genuine SUPERSEDES edge) delivered without a graph store. Written by t0-verify, NOT ingest-result: a trial row is a mechanical fact produced by running commands, in the same class as the verdict artifact t0-verify already owns, and carries no worker claim to apply.",
+      "description": "One row per T0 run — the ratchet's history, and the artifact that makes 'is attempt N+1 better than attempt N?' answerable. Append-only (I4: every superseded object remains addressable). baseline_trial is the parent link: that single field IS the experiment DAG (lineage, PARENT_OF, and a genuine SUPERSEDES edge) delivered without a graph store. Written by t0-verify, NOT the loop: a trial row is a mechanical fact produced by running commands, in the same class as the verdict artifact t0-verify already owns, and carries no worker claim to apply.",
       "x-tier": "LOCAL",
       "x-location": ".shapeup/<slug>/t0/trials.jsonl",
       "x-writer": "harness verify t0 (append-only)",
-      "x-readers": "harness compile (payload.trial_history — the paper's inspect()), harness probe stats --ratchet (improvement_rate, monotone_rate, sawtooth_count)",
+      "x-readers": "the loop (payload.trial_history — the paper's inspect()), the loop (the ratchet block of the ship report: improvement_rate, monotone_rate, sawtooth_count)",
       "type": "object",
       "properties": {
         "schema_version": {
@@ -1465,122 +1306,12 @@
         "status"
       ]
     },
-    "RoundBuildVerdict": {
-      "description": "The round build gate's verdict — did the FEATURE build and launch this round, measured before the judge is asked. A T0Artifact is one scope's fixtures inside its own substrate; this is the whole feature's run_cmd (from the run ledger), then the profile's build_probe and launch_probe, run in that order and stopping at the first failure. Zero LLM tokens. Two readers act on it: reduce hill withholds DOWNHILL_EXECUTION from every T0-green verdict of a round whose gate is red (a green fixture in a round the app did not compile is evidence about the fixture, not the scope), and harness compile turns each failing step into a `bug` for the next round's fix orders, addressed by the files the tool's output names. Immutable per gate run (`wx`, next ordinal); readers take the latest artifact for a round.",
-      "x-tier": "LOCAL",
-      "x-location": ".shapeup/<slug>/build/r<N>-t<T>.json",
-      "x-writer": "harness verify build",
-      "x-readers": "harness reduce hill (red rounds move no dot), harness compile (next round's payload.bugs), tech-lead (GATE L2 block: build gate state)",
-      "type": "object",
-      "required": [
-        "schema_version",
-        "round",
-        "trial",
-        "at",
-        "overall",
-        "steps"
-      ],
-      "properties": {
-        "schema_version": {
-          "type": "integer",
-          "enum": [
-            1
-          ]
-        },
-        "round": {
-          "type": "integer"
-        },
-        "trial": {
-          "type": "integer",
-          "description": "Ordinal of this gate run within the round — a re-run after a hand fix lands beside its predecessor, never over it."
-        },
-        "run_id": {
-          "type": "string",
-          "pattern": "^[a-z0-9][a-z0-9-]*-[0-9]{8}T[0-9]{6}Z-[0-9a-f]{8}$"
-        },
-        "at": {
-          "type": "string",
-          "description": "ISO timestamp."
-        },
-        "archetype": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "The profile's archetype, for the reader deciding whether a missing launch_probe matters."
-        },
-        "overall": {
-          "type": "string",
-          "enum": [
-            "green",
-            "red"
-          ]
-        },
-        "steps": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "kind": {
-                "type": "string",
-                "enum": [
-                  "run_cmd",
-                  "build_probe",
-                  "launch_probe"
-                ]
-              },
-              "cmd": {
-                "type": "string"
-              },
-              "exit": {
-                "type": "integer"
-              },
-              "pass": {
-                "type": "boolean"
-              },
-              "skipped": {
-                "type": "boolean",
-                "description": "true when an earlier step failed and this one was not run."
-              },
-              "stdout_tail": {
-                "type": "string"
-              },
-              "stderr_tail": {
-                "type": "string"
-              },
-              "error": {
-                "type": "string",
-                "description": "Spawn failure or timeout — the command did not run to completion, which is not the same fact as a non-zero exit."
-              }
-            },
-            "required": [
-              "kind",
-              "cmd"
-            ]
-          }
-        },
-        "warnings": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "What the gate could not check and why — a launch-required archetype with no launch_probe, a ledger with no run_cmd."
-        },
-        "discovered_tasks": {
-          "type": "array",
-          "items": {
-            "$ref": "#/$defs/AegisTriple"
-          },
-          "description": "The failing steps' output digested; populated only on red."
-        }
-      }
-    },
 "VerdictLedgerLine": {
       "description": "One appended line of judge history (JSONL). Never rewritten — flips across runs are detected here and force confidence low. run auto-increments per append batch.",
       "x-tier": "LOCAL",
       "x-location": ".shapeup/<slug>/evaluation/.verdicts-<target>.jsonl",
-      "x-writer": "harness reduce ingest (from Verdict.criteria[])",
-      "x-readers": "spec-evaluator (read-only flip detection), harness reduce verdict",
+      "x-writer": "the loop (from Verdict.criteria[])",
+      "x-readers": "spec-evaluator (read-only flip detection)",
       "type": "object",
       "properties": {
         "run": {
@@ -1618,34 +1349,12 @@
         }
       }
     },
-    "HillShard": {
-      "description": "One scope's hill position — DERIVED, never self-reported: UPHILL_UNKNOWN (open unknowns > 0) → UPHILL_SOLVED (unknowns 0, no T0-green yet) → DOWNHILL_EXECUTION (≥1 T0-green from a round that built; T1 pending) → FINISHED (T1 PASS ∧ that T0-green). Single-writer = whoever holds that scope's branch. Progress is reported by hill position, never task counts.",
-      "x-tier": "SHARED",
-      "x-location": "shapeup/<slug>/hill/<scope-id>.yml",
-      "x-writer": "tech-lead (GATE L2 derivation)",
-      "x-readers": "tech-lead (GATE L3 hill report), scope-hammer (census), GATE L1b sequencing",
-      "type": "object",
-      "properties": {
-        "scope_id": {
-          "type": "string"
-        },
-        "phase": {
-          "type": "string",
-          "enum": [
-            "UPHILL_UNKNOWN",
-            "UPHILL_SOLVED",
-            "DOWNHILL_EXECUTION",
-            "FINISHED"
-          ]
-        }
-      }
-    },
     "MetricsRow": {
       "description": "One SHIP-time harvest row (facts only — copied from structured output that already exists; never a newly computed verdict/score, which would be a second judge behind spec-evaluator). Sharded per machine so concurrent runs never merge-conflict.",
       "x-tier": "LOCAL",
       "x-location": ".shapeup/metrics/<machine-id>.jsonl",
-      "x-writer": "tech-lead (SHIP S.6)",
-      "x-readers": "harness probe stats (read-only projection), harness report export (the run dimension)",
+      "x-writer": "none — the ship-time harvest step retired with the run script's sequencing; rows an earlier release wrote under .shapeup/metrics/ keep this shape",
+      "x-readers": "none",
       "type": "object",
       "properties": {
         "schema_version": {
@@ -1656,7 +1365,7 @@
         },
         "at": {
           "type": "string",
-          "description": "OPTIONAL (v1.2) — ISO harvest timestamp; enables real trend-over-time in harness probe stats. Older rows lack it and fall back to shard append order."
+          "description": "OPTIONAL (v1.2) — ISO harvest timestamp; enables a trend over time. Older rows lack it and fall back to shard append order."
         },
         "run_id": {
           "type": "string",
@@ -1689,7 +1398,7 @@
         },
         "attempt_exhaustions": {
           "type": "integer",
-          "description": "OPTIONAL (v1.2) — scopes whose inner attempt_budget tripped this run, COPIED at SHIP S.6 from the queued GATE H hammer proposals (a fact registered at the source; harness probe stats must never re-derive it)."
+          "description": "OPTIONAL (v1.2) — scopes whose inner attempt_budget tripped this run, COPIED at SHIP S.6 from the queued GATE H hammer proposals (a fact registered at the source; no reader may re-derive it)."
         },
         "qa_findings": {
           "type": "object",
@@ -1711,7 +1420,7 @@
         },
         "ratchet": {
           "type": "object",
-          "description": "OPTIONAL (v1.5) — the DAY-1 exit measurement, COPIED from `harness probe stats --ratchet` over this run's t0/trials.jsonl before the LOCAL trace is wiped. This is the only place the ratchet numbers survive the run, and the only reason they can be compared across machines: `.shapeup/` is gitignored, so a measurement left there answers the question exactly once and then deletes itself. Facts only — every field is a count or a ratio over recorded trial rows, never a grade.",
+          "description": "OPTIONAL (v1.5) — the DAY-1 exit measurement, COPIED from the ratchet report over this run's t0/trials.jsonl before the LOCAL trace is wiped. This is the only place the ratchet numbers survive the run, and the only reason they can be compared across machines: `.shapeup/` is gitignored, so a measurement left there answers the question exactly once and then deletes itself. Facts only — every field is a count or a ratio over recorded trial rows, never a grade.",
           "properties": {
             "trials": {
               "type": "integer"
@@ -1742,7 +1451,7 @@
         },
         "hooks": {
           "type": "object",
-          "description": "OPTIONAL (v1.5) — the DAY-2 exit measurement, COPIED from `harness probe stats --hooks` over .shapeup/decisions.jsonl. Makes 'never had to fire' and 'never ran' separable across runs: before the decision ledger both produced exit 0 and empty stdout, which is why several enforcement tools were unscoreable.",
+          "description": "OPTIONAL (v1.5) — the DAY-2 exit measurement, COPIED from the hook decision ledger, .shapeup/decisions.jsonl. Makes 'never had to fire' and 'never ran' separable across runs: before the decision ledger both produced exit 0 and empty stdout, which is why several enforcement tools were unscoreable.",
           "properties": {
             "evaluations": {
               "type": "integer"
@@ -1772,7 +1481,7 @@
       "description": "What the sandbox hook reads to enforce the active scope's substrate on every Edit/Write this round. Written at branch checkout; NOT writable by any worker (a worker must never widen its own sandbox).",
       "x-tier": "LOCAL",
       "x-location": ".shapeup/active-scope",
-      "x-writer": "tech-lead (BUILD step 0)",
+      "x-writer": "harness init run (and init run --force when it reopens a closed run); never a worker",
       "x-readers": "sandbox-guard hook",
       "type": "object",
       "properties": {
@@ -1821,364 +1530,49 @@
         }
       }
     },
-    "RunSnapshot": {
-      "description": "Mechanical mid-run state digest, derived ONLY from files (active-scope pointer, harness-run.md frontmatter, board frontmatter, t0/verdicts filenames, orders/ vs results/) — never from conversation memory. The continuity reflex: after any context loss the orchestrator re-derives this from disk rather than trusting a lossy summary — or, on a cold startup, rather than re-opening a run that is already open.",
-      "x-tier": "LOCAL",
-      "x-location": ".shapeup/<slug>/run-snapshot.json (written by harness reduce snapshot --write; also emitted ephemerally on stdout by harness reduce snapshot)",
-      "x-writer": "harness reduce snapshot --write (never a worker; this is LOCAL derived cache, harness reduce ingest remains the sole writer of SHARED state)",
-      "x-readers": "tech-lead (--from resume aid), human",
+    "RequirementClause": {
+      "description": "One atomic customer requirement, frozen with a STABLE id — the covers-closure input truth (spine v1.3). Extracted from the REQ source (pitch / customer-requirements doc / use-case bodies) by the planner — extraction is judgment (LLM), but ids are assigned ONCE and never renumber (they behave like scope_id, not TASK-NNN — every covers: link would rot otherwise). Supersede-never-delete: a dropped clause is marked CUT (PO-approved), never removed, so the registry stays auditable on a fresh clone. The original REQ source is never edited — the registry is a separate derived, committed file.",
+      "x-tier": "SHARED",
+      "x-location": "shapeup/<slug>/requirements.md",
+      "x-writer": "the loop's plan activity, requirements substep — extraction only; CUT status is a PO governance edit (same class as a round-ledger Decision)",
+      "x-readers": "the loop's planning read-back (covers-closure), the loop (the L1b REQ → AC table), human (coverage/cut audit)",
       "type": "object",
       "required": [
-        "schema_version",
-        "at",
-        "slug"
+        "id",
+        "clause",
+        "status"
       ],
       "properties": {
-        "schema_version": {
-          "type": "integer",
-          "enum": [
-            1
-          ]
-        },
-        "at": {
+        "id": {
           "type": "string",
-          "description": "ISO timestamp of derivation."
+          "pattern": "^REQ-[0-9]+$",
+          "description": "REQ-N — assigned once, frozen; the stable cross-machine key every covers[] / traces_to[] link resolves against."
         },
-        "slug": {
-          "type": "string"
+        "clause": {
+          "type": "string",
+          "description": "The requirement text, VERBATIM from the source — the deletion this closure catches is a clause that no AC covers."
         },
-        "scope_id": {
+        "source": {
           "type": "string",
-          "description": "Present only while a scope is checked out (active-scope pointer exists)."
+          "description": "Where the clause came from (e.g. \"pitch §2.2\", \"req-doc.md#L14\", \"UC-04 body\") — the provenance an auditor traces back."
         },
         "status": {
           "type": "string",
           "enum": [
-            "orienting",
-            "mapping",
-            "building",
-            "evaluating",
-            "shipped",
-            "escalated",
-            "aborted"
+            "covered",
+            "CUT (PO-approved)"
           ],
-          "description": "Mirrors harness-run.md frontmatter status — kernel/probe/resume.mjs's RUN_STATUSES is the source enum this one must not drift from."
-        },
-        "round": {
-          "type": "integer",
-          "description": "From the latest t0/verdicts/r<N>-a<M>.json filename; falls back to rounds_used."
-        },
-        "attempt": {
-          "type": "integer",
-          "description": "From the latest t0/verdicts/r<N>-a<M>.json filename."
-        },
-        "rounds_used": {
-          "type": "integer",
-          "description": "Highest round carrying any build evidence (an order, a T0 verdict, a round build-gate artifact, or an EVAL result) — kernel/probe/rounds.mjs's deriveRounds(), the same derivation the ship report and the export use. Falls back to harness-run.md's literal frontmatter value only when no such evidence exists on disk."
-        },
-        "rounds_judged": {
-          "type": "integer",
-          "description": "Highest round EVAL actually returned a verdict for (an evaluate-r<N>.json result on disk) — its own field, never folded into rounds_used: a round built is not a round judged. Omitted when no round has been judged yet."
-        },
-        "max_rounds": {
-          "type": "integer"
-        },
-        "auto_level": {
-          "type": "string"
-        },
-        "latest_t0": {
-          "type": "object",
-          "properties": {
-            "path": {
-              "type": "string"
-            },
-            "overall": {
-              "type": "string",
-              "enum": [
-                "green",
-                "red"
-              ]
-            },
-            "round": {
-              "type": "integer"
-            },
-            "attempt": {
-              "type": "integer"
-            }
-          }
-        },
-        "board": {
-          "type": "object",
-          "properties": {
-            "total": {
-              "type": "integer"
-            },
-            "done": {
-              "type": "integer"
-            },
-            "unfinished": {
-              "type": "array",
-              "items": {
-                "type": "string"
-              },
-              "description": "Task ids not yet done — capped at 10."
-            }
-          }
-        },
-        "pending_orders": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "orders/ files with no same-name file in results/ — dispatched but not ingested; re-dispatching one of these is the exact post-compaction mistake this record exists to prevent."
-        },
-        "spec_folder": {
-          "type": "string"
+          "description": "covered = must be named by ≥1 AC's covers[] or the planning read-back finds it; CUT (PO-approved) = a Betting-Table decision to drop it, kept for audit (never deleted)."
         },
-        "rehydrate_hint": {
+        "note": {
           "type": "string",
-          "description": "The composed one-paragraph instruction for resuming after a context loss: re-read run-state, trust the files, not the summary."
+          "description": "Optional rationale — required in spirit for a CUT (why the clause was dropped)."
         }
       }
     },
-    "StatsReport": {
-      "description": "The telemetry read-plane's output — an aggregate projection over the MetricsRow shards. Aggregates COPIED facts only (counts, rates, trends over already-recorded fields); it never grades, so it can never become a second judge. Malformed rows are skipped fail-open and counted; pathology rows (sandbox-guard/safety-spine denials share the shards) are partitioned, not errors.",
-      "x-tier": "EMBEDDED (ephemeral projection — printed to stdout, never persisted; the metrics JSONL stays the only source of truth)",
-      "x-writer": "harness probe stats (read-only over metrics/ — writes nothing)",
-      "x-readers": "human / CLI / CI",
-      "type": "object",
-      "required": [
-        "schema_version",
-        "generated_at",
-        "rows_total",
-        "per_slug"
-      ],
-      "properties": {
-        "schema_version": {
-          "type": "integer",
-          "enum": [
-            1
-          ]
-        },
-        "generated_at": {
-          "type": "string"
-        },
-        "metrics_dir": {
-          "type": "string"
-        },
-        "sources": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Shard filenames read."
-        },
-        "rows_total": {
-          "type": "integer",
-          "description": "Valid harvest rows aggregated."
-        },
-        "rows_malformed": {
-          "type": "integer",
-          "description": "Lines skipped fail-open (unparseable, or missing feature_slug/terminal_state)."
-        },
-        "rows_pathology": {
-          "type": "integer",
-          "description": "kind:\"pathology\" rows (hook denials) — partitioned into the histogram, not aggregated as runs."
-        },
-        "pathologies": {
-          "type": "object",
-          "description": "Histogram keyed by pathology code, e.g. {\"PA3\": 2, \"SAFETY\": 1}."
-        },
-        "per_slug": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "required": [
-              "feature_slug",
-              "runs"
-            ],
-            "properties": {
-              "feature_slug": {
-                "type": "string"
-              },
-              "runs": {
-                "type": "integer"
-              },
-              "rounds": {
-                "type": "object",
-                "properties": {
-                  "min": {
-                    "type": "integer"
-                  },
-                  "max": {
-                    "type": "integer"
-                  },
-                  "avg": {
-                    "type": "number"
-                  }
-                }
-              },
-              "terminal_states": {
-                "type": "object",
-                "description": "Histogram of terminal_state values."
-              },
-              "hammer_cut_rate": {
-                "type": "number",
-                "description": "Share of runs with scope_cut_count > 0."
-              },
-              "scope_cuts_total": {
-                "type": "integer"
-              },
-              "attempt_exhaustions": {
-                "type": "integer",
-                "description": "Summed only where the optional MetricsRow field exists — never re-derived."
-              },
-              "qa": {
-                "type": "object",
-                "properties": {
-                  "total": {
-                    "type": "integer"
-                  },
-                  "promoted": {
-                    "type": "integer"
-                  },
-                  "held": {
-                    "type": "integer"
-                  },
-                  "promotion_rate": {
-                    "type": "number"
-                  }
-                }
-              },
-              "surprise_avg": {
-                "type": "number"
-              },
-              "rounds_per_slice_avg": {
-                "type": "number",
-                "description": "round_count/slice_count averaged over rows where slice_count > 0 — the normalized effort signal."
-              }
-            }
-          }
-        },
-        "trend": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "required": [
-              "feature_slug",
-              "seq",
-              "round_count"
-            ],
-            "properties": {
-              "feature_slug": {
-                "type": "string"
-              },
-              "seq": {
-                "type": "integer",
-                "description": "Append order within the shard — the fallback ordering for rows without `at`."
-              },
-              "at": {
-                "type": "string"
-              },
-              "round_count": {
-                "type": "integer"
-              }
-            }
-          },
-          "description": "round_count over time — the 'is the KB flywheel working' chart."
-        }
-      }
-    },
-    "Lane": {
-      "description": "The run's lane (full|tiny), computed by harness init fit at GATE L0.3 and recorded in harness-run.md frontmatter `lane:` (with its evidence, and marked overridden when --lane/--tiny outranks the recommendation); RunArgs.lane carries it to the workflow launch. The lane is pipeline knowledge: the orchestrator compiles it away into existing registered knobs (lens, budgets, gate policy) — it NEVER rides in WorkOrderPayload, so workers stay pipeline-blind.",
-      "x-tier": "EMBEDDED (recorded in harness-run.md frontmatter `lane:` — never a WorkOrderPayload field)",
-      "x-writer": "tech-lead (GATE L0 lane selection)",
-      "x-readers": "tech-lead only",
-      "x-lane-policy": {
-        "tiny": {
-          "selection": "one-scope pitch AND appetite <= 2 weeks AND no third-party integration AND <= 3 user-facing actions — the same predicate ba-pitch-analyzer uses to judge lens: lite",
-          "skips": [
-            "orient",
-            "gate-l1a",
-            "full board ceremony at L1b (auto-generated lens:lite board, one merged confirmation gate)"
-          ],
-          "defaults": {
-            "qa": "--no-qa",
-            "round_budget": 2
-          },
-          "never_skips": [
-            "EVAL (single judge)",
-            "T0",
-            "hooks"
-          ]
-        },
-        "normal": {
-          "selection": "everything else — today's behavior, unchanged",
-          "skips": [],
-          "defaults": {
-            "round_budget": 3
-          }
-        },
-        "full": {
-          "selection": "cross-context lens OR appetite >= 6 weeks",
-          "skips": [],
-          "defaults": {
-            "lens": "cross-context",
-            "qa": "mandatory",
-            "round_budget": 4
-          }
-        }
-      },
-      "type": "string",
-      "enum": [
-        "tiny",
-        "normal",
-        "full"
-      ]
-    },
-    "RequirementClause": {
-      "description": "One atomic customer requirement, frozen with a STABLE id — the covers-closure input truth (spine v1.3). Extracted from the REQ source (pitch / customer-requirements doc / use-case bodies) by the planner — extraction is judgment (LLM), but ids are assigned ONCE and never renumber (they behave like scope_id, not TASK-NNN — every covers: link would rot otherwise). Supersede-never-delete: a dropped clause is marked CUT (PO-approved), never removed, so the registry stays auditable on a fresh clone. The original REQ source is never edited — the registry is a separate derived, committed file.",
-      "x-tier": "SHARED",
-      "x-location": "shapeup/<slug>/requirements.md",
-      "x-writer": "ba-pitch-analyzer (operation: coverage) — extraction only; CUT status is a PO governance edit (same class as a round-ledger Decision)",
-      "x-readers": "harness verify trace (covers-closure oracle), tech-lead, human (coverage/cut audit)",
-      "type": "object",
-      "required": [
-        "id",
-        "clause",
-        "status"
-      ],
-      "properties": {
-        "id": {
-          "type": "string",
-          "pattern": "^REQ-[0-9]+$",
-          "description": "REQ-N — assigned once, frozen; the stable cross-machine key every covers[] / traces_to[] link resolves against."
-        },
-        "clause": {
-          "type": "string",
-          "description": "The requirement text, VERBATIM from the source — the deletion this closure catches is a clause that no AC covers."
-        },
-        "source": {
-          "type": "string",
-          "description": "Where the clause came from (e.g. \"pitch §2.2\", \"req-doc.md#L14\", \"UC-04 body\") — the provenance an auditor traces back."
-        },
-        "status": {
-          "type": "string",
-          "enum": [
-            "covered",
-            "CUT (PO-approved)"
-          ],
-          "description": "covered = must be named by ≥1 AC's covers[] or trace-lint goes red; CUT (PO-approved) = a Betting-Table decision to drop it, kept for audit (never deleted)."
-        },
-        "note": {
-          "type": "string",
-          "description": "Optional rationale — required in spirit for a CUT (why the clause was dropped)."
-        }
-      }
-    },
-    "WiringEntry": {
-      "description": "One use-case's reachability chain inside a WiringMap: engine → wiring seam → entry-point call site → player-visible affordance. The declaration front-loads the integration seam scope-architect needs at slicing time (the missing input behind the round-1 main.js substrate-expansion escalations).",
-      "x-tier": "EMBEDDED (inside WiringMap.entries)",
+    "WiringEntry": {
+      "description": "One use-case's reachability chain inside a WiringMap: engine → wiring seam → entry-point call site → player-visible affordance. The declaration front-loads the integration seam the scopes substep needs at slicing time (the missing input behind the round-1 main.js substrate-expansion escalations).",
+      "x-tier": "EMBEDDED (inside WiringMap.entries)",
       "type": "object",
       "required": [
         "use_case",
@@ -2191,7 +1585,7 @@
         },
         "engine": {
           "type": "string",
-          "description": "Repo-relative path of the module implementing the UC's core logic — the file reachability BFS must reach from the entry point (a dead module with 0 import sites is red)."
+          "description": "Repo-relative path of the module implementing the UC's core logic — the file the use case's affordance must reach from the entry point."
         },
         "wiring_seam": {
           "type": "string",
@@ -2199,7 +1593,7 @@
         },
         "entry_call_site": {
           "type": "string",
-          "description": "DESIGN INTENT (spine v1.3): the composition-root attachment this engine registers into, named from ProjectProfile.entry_point + the mechanism — e.g. 'src/server.ts — POST /checkout route', 'main.js — game-loop init hook'. Symbolic, authored at L1a.5 before the code exists; NEVER an invented file:line. The concrete coordinate is a build-time fact; the reachability oracle proves the seam via the import graph (engine reached from entry_point) and does not parse this field."
+          "description": "DESIGN INTENT (spine v1.3): the composition-root attachment this engine registers into, named from ProjectProfile.entry_point + the mechanism — e.g. 'src/server.ts — POST /checkout route', 'main.js — game-loop init hook'. Symbolic, authored at L1a.5 before the code exists; NEVER an invented file:line. The concrete coordinate is a build-time fact; the evaluator checks it against the running app and nothing parses this field."
         },
         "affordance": {
           "type": "string",
@@ -2208,9 +1602,9 @@
       }
     },
     "Seam": {
-      "description": "How one use case's engine attaches to the entry point — the `wiring_seam` value of a WiringEntry, promoted to a first-class node by `reduce graph` so a verdict can be traced back through the seam to the objective. Not a file: it exists only as a cell in the committed wiring map and as a node in the derived run graph.",
-      "x-tier": "EMBEDDED (a WiringEntry.wiring_seam value; promoted to a node by reduce graph)",
-      "x-writer": "solution-architect (operation: wire), inside wiring-map.md",
+      "description": "How one use case's engine attaches to the entry point — the `wiring_seam` value of a WiringEntry, Not a file: it exists only as a cell in the committed wiring map.",
+      "x-tier": "EMBEDDED (a WiringEntry.wiring_seam value)",
+      "x-writer": "the loop's plan activity, wire substep, inside wiring-map.md",
       "type": "object",
       "properties": {
         "seam": {
@@ -2228,11 +1622,11 @@
       }
     },
     "WiringMap": {
-      "description": "The reachability map — per UC, the chain from engine to a player-visible affordance (spine v1.3). Written DIRECTLY by solution-architect at gate L1a.5 (precedent: ScopeContract is written directly by scope-architect, bypassing ingest-result). Its purpose: no engine ships orphaned from the running application. trace-lint folds reachability into its covers-closure pass — a UC whose engine does not reach ProjectProfile.entry_point via the import graph is red. A Mermaid view is auto-rendered from this map (a view of a checked graph, so it cannot drift). ON-DISK FORMAT IS MARKDOWN (ADR-0001): frontmatter carries the scalars and [a, b] lists, a markdown table carries the one array-of-objects field, and prose carries the rationale a reviewer reads. THIS SCHEMA DESCRIBES THE PARSED OBJECT — the wire form embedded in the WorkOrder envelope — not the file. `kernel/lib/contract.mjs` is the only reader/writer of the file form; everything downstream of that parse sees exactly this shape.",
+      "description": "The reachability map — per UC, the chain from engine to a player-visible affordance (spine v1.3). Written DIRECTLY by the plan activity's wire substep before gate L1a.5 (precedent: ScopeContract is written directly by the scopes substep, bypassing the loop). Its purpose: no engine ships orphaned from the running application — the evaluator and the loop's build and launch check that against the built app. ON-DISK FORMAT IS MARKDOWN: frontmatter carries the scalars and [a, b] lists, a markdown table carries the one array-of-objects field, and prose carries the rationale a reviewer reads. THIS SCHEMA DESCRIBES THE PARSED OBJECT — the wire form embedded in the WorkOrder envelope — not the file. `kernel/lib/contract.mjs` is the only reader/writer of the file form; everything downstream of that parse sees exactly this shape.",
       "x-tier": "SHARED",
       "x-location": "shapeup/<slug>/wiring-map.md",
-      "x-writer": "solution-architect (SOLE writer, direct — like scope-architect writes scopes/*.md)",
-      "x-readers": "harness verify trace (reachability oracle), scope-architect (integration seam at slicing time), tech-lead",
+      "x-writer": "the loop's plan activity, wire substep (SOLE writer, direct — like the scopes substep writes scopes/*.md)",
+      "x-readers": "the plan activity (scopes: integration seam at slicing time), spec-evaluator",
       "type": "object",
       "required": [
         "schema_version",
@@ -2252,7 +1646,7 @@
         },
         "entry_point": {
           "type": "string",
-          "description": "OPTIONAL echo of ProjectProfile.entry_point at authoring time (informational — the profile stays the source of truth reachability resolves against)."
+          "description": "OPTIONAL echo of ProjectProfile.entry_point at authoring time (informational — the profile stays the source of truth)."
         },
         "entries": {
           "type": "array",
@@ -2263,11 +1657,11 @@
       }
     },
     "ProjectProfile": {
-      "description": "The archetype + entry-point declaration reachability depends on (spine v1.3). Exists for ONE load-bearing reason: reachability must know the entry point, and that is archetype-specific (main.js for a client-only game is not the seam for a web-service). SHARED — a declaration that must survive `rm -rf .shapeup/` + clone cannot live in the gitignored run-trace. Role-gating (skip SysRS/Auth/CI-CD) is explicitly OUT of scope — those roles are not workers; the profile is introduced only as the entry-point/archetype declaration. ON-DISK FORMAT IS MARKDOWN (ADR-0001): frontmatter carries the scalars and [a, b] lists, a markdown table carries the one array-of-objects field, and prose carries the rationale a reviewer reads. THIS SCHEMA DESCRIBES THE PARSED OBJECT — the wire form embedded in the WorkOrder envelope — not the file. `kernel/lib/contract.mjs` is the only reader/writer of the file form; everything downstream of that parse sees exactly this shape.",
+      "description": "The archetype + entry-point declaration the wiring map and the build probes depend on (spine v1.3). The entry point is archetype-specific (main.js for a client-only game is not the seam for a web-service). SHARED — a declaration that must survive `rm -rf .shapeup/` + clone cannot live in the gitignored run-trace. Role-gating (skip SysRS/Auth/CI-CD) is explicitly OUT of scope — those roles are not workers; the profile is introduced only as the entry-point/archetype declaration. ON-DISK FORMAT IS MARKDOWN: frontmatter carries the scalars and [a, b] lists, a markdown table carries the one array-of-objects field, and prose carries the rationale a reviewer reads. THIS SCHEMA DESCRIBES THE PARSED OBJECT — the wire form embedded in the WorkOrder envelope — not the file. `kernel/lib/contract.mjs` is the only reader/writer of the file form; everything downstream of that parse sees exactly this shape.",
       "x-tier": "SHARED",
       "x-location": "shapeup/<slug>/project-profile.md",
-      "x-writer": "tech-lead (GATE L0 — not harness compile, which stays pipeline-blind)",
-      "x-readers": "harness verify trace (reachability entry_point), harness verify build (build_probe + launch_probe, once per round before EVAL), solution-architect (wire), tech-lead",
+      "x-writer": "the loop, at the intake gate (not the loop, which stays pipeline-blind)",
+      "x-readers": "the loop (build_probe + launch_probe, once per round before EVAL), the plan activity (wire)",
       "type": "object",
       "required": [
         "schema_version",
@@ -2290,28 +1684,23 @@
             "library",
             "data-pipeline"
           ],
-          "description": "Validated against the enum — a typo must FAIL, never silently disable reachability."
+          "description": "Validated against the enum — a typo must FAIL, never silently disable a check."
         },
         "entry_point": {
           "type": "string",
-          "description": "The repo-relative seam trace-lint reachability resolves engines against (e.g. main.js, src/server.ts). Not hardcoded — archetype-specific."
+          "description": "The repo-relative seam the wiring map resolves engines against (e.g. main.js, src/server.ts). Not hardcoded — archetype-specific."
         },
         "note": {
           "type": "string",
           "description": "Optional context on the archetype/entry-point choice."
         },
-        "source_extensions": {
-          "type": "array",
-          "items": { "type": "string" },
-          "description": "OPTIONAL — the file extensions this project's modules use, for the import walk that reachability runs. Absent means the JS/TS family plus the entry point's own suffix, which is right for most stacks and wrong for any stack whose engines end in something the entry point does not. Declare it when they differ (e.g. [\".ets\"] for ArkTS, [\".vue\", \".ts\"] for a Vue app): a walk that cannot follow an edge reports itself unchecked rather than reporting every engine orphaned, so the cost of leaving this absent is a skipped arm, never a false red."
-        },
         "build_probe": {
           "type": "string",
-          "description": "OPTIONAL — a command that asserts the BUILT ARTIFACT, not the build's exit code, and exits 0 only when it holds. Exists because a green build is not proof the feature compiled: some toolchains compile only the files reachable from an entry point, so a scope's new files can sit outside the compiled set while the build stays green (measured: an app package holding 3 compiled files, 58 errors once the rest became reachable). Archetype-specific by construction — e.g. 'the compiled source map lists every file under each scope's substrate'. Run by harness verify build after run_cmd, once per round before EVAL; absent = no such step, never a failure."
+          "description": "OPTIONAL — a command that asserts the BUILT ARTIFACT, not the build's exit code, and exits 0 only when it holds. Exists because a green build is not proof the feature compiled: some toolchains compile only the files reachable from an entry point, so a scope's new files can sit outside the compiled set while the build stays green (measured: an app package holding 3 compiled files, 58 errors once the rest became reachable). Archetype-specific by construction — e.g. 'the compiled source map lists every file under each scope's substrate'. Run by the loop (build and launch) after run_cmd, once per round before EVAL; absent = no such step, never a failure."
         },
         "launch_probe": {
           "type": "string",
-          "description": "OPTIONAL for most archetypes, EXPECTED for `mobile` — a command that installs the built artifact, starts it, asserts the first screen (ids, text, a screenshot diff) and fails on fatal runtime log patterns. Exists because nothing else in the loop launches the app: a blank first screen survived three EVAL rounds on a run whose every T0 fixture was green. Run by harness verify build after run_cmd and build_probe; a mobile profile without one is warned about on every round so the 'on-device install unverified' risk has a named owner. Absent = no such step."
+          "description": "OPTIONAL for most archetypes, EXPECTED for `mobile` — a command that installs the built artifact, starts it, asserts the first screen (ids, text, a screenshot diff) and fails on fatal runtime log patterns. Exists because nothing else in the loop launches the app: a blank first screen survived three EVAL rounds on a run whose every T0 fixture was green. Run by the loop (build and launch) after run_cmd and build_probe; a mobile profile without one should be called out at GATE L0, so the 'on-device install unverified' risk has a named owner. Absent = no such step."
         }
       }
     },
@@ -2329,7 +1718,7 @@
           "items": {
             "$ref": "#/$defs/TaskRef"
           },
-          "description": "task-executor: what to implement · scope-architect: the slicing input · spec-evaluator: traceability ONLY (never a grading source)."
+          "description": "task-executor: what to implement · spec-evaluator: traceability ONLY (never a grading source)."
         },
         "decisions": {
           "type": "array",
@@ -2355,7 +1744,7 @@
         },
         "kb_rules_path": {
           "type": "string",
-          "description": "Coachable workers (task-executor, ba-pitch-analyzer, qa-edge-hunter, orient, scope-architect, solution-architect): shapeup/knowledge-base/<skill>.md — steering, never spec and never a gate; conflict → the AC, the contract or the gate wins, noted in deviations. The judge and the census are not coachable."
+          "description": "Coachable workers (task-executor, qa-edge-hunter, orient): shapeup/knowledge-base/<skill>.md — steering, never spec and never a gate; conflict → the AC, the contract or the gate wins, noted in deviations. The judge and the census are not coachable."
         },
         "verify": {
           "$ref": "#/$defs/VerifySpec",
@@ -2367,7 +1756,7 @@
         },
         "bugs": {
           "type": "array",
-          "description": "The previous round's FAIL verdict, addressed to the scope whose substrate contains each cited file — touch nothing else. Written by `harness compile` from results/evaluate-r<N-1>.json, never by a caller: a build order is addressed by scope/round/attempt and carries no caller payload, and the verdict must survive the relaunch that separates two rounds. Present on any r≥2 execute order whose predecessor failed; an entry matching no scope's substrate is marked `unowned` and sent to all of them rather than dropped."
+          "description": "The previous round's FAIL verdict, addressed to the scope whose substrate contains each cited file — touch nothing else. Written by `the loop` from results/evaluate-r<N-1>.json, never by a caller: a build order is addressed by scope/round/attempt and carries no caller payload, and the verdict must survive the relaunch that separates two rounds. Present on any r≥2 execute order whose predecessor failed; an entry matching no scope's substrate is marked `unowned` and sent to all of them rather than dropped."
         },
         "spec_folder": {
           "type": "string",
@@ -2379,51 +1768,37 @@
         },
         "pitch": {
           "type": "string",
-          "description": "ba-pitch-analyzer (analyze) / orient: the kicked-off pitch path (shaped + bet; frontmatter appetite/status/bet)."
+          "description": "orient: the kicked-off pitch path (shaped + bet; frontmatter appetite/status/bet)."
         },
         "breadboard": {
           "type": "string",
-          "description": "orient / ba-pitch-analyzer (analyze) / solution-architect / scope-architect: the run's staged breadboard — Places (P#), UI and code affordances (U#, N#), stores (S#), slices (V#). Absent = the pitch has no separate breadboard (it may carry one inline); never inferred from the pitch's folder."
-        },
-        "lens": {
-          "type": "string",
-          "enum": [
-            "lite",
-            "standard",
-            "cross-context"
-          ],
-          "description": "ba-pitch-analyzer: analysis depth. Absent → the planner judges it and records the choice in assumptions[]."
-        },
-        "orient_dir": {
-          "type": "string",
-          "description": "ba-pitch-analyzer: the Scout's artifact dir — code-surface.md IS the codebase map (do not re-scan)."
+          "description": "orient: the run's staged breadboard — Places (P#), UI and code affordances (U#, N#), stores (S#), slices (V#). Absent = the pitch has no separate breadboard (it may carry one inline); never inferred from the pitch's folder."
         },
         "stack": {
           "type": "string",
-          "description": "orient: stack hint aiming the code-surface sweeps (e.g. \"pnpm, Next 16 web :3000\"). coach (research): the platform and toolchain the official-documentation research is aimed at — required, since a project with nothing on disk names no stack by itself."
+          "description": "orient: stack hint aiming the code-surface sweeps (e.g. \"pnpm, Next 16 web :3000\")."
         },
-        "discovered_ledger": {
+        "step": {
           "type": "string",
-          "description": "ba-pitch-analyzer (reconcile) / scope-architect (map-scopes): the discovery ledger path whose raw [+]/~ lines get folded in."
+          "enum": ["requirements", "spec", "wire", "scopes"],
+          "description": "building (operation: plan): which planning substep this fence order covers. The order's id is plan-<step> and its substrate is that substep's write contract, so each substep leaves its own leg row and its own fence."
         },
-        "requirements": {
+        "mode": {
           "type": "string",
-          "description": "ba-pitch-analyzer: the REQ source to extract atomic clauses from (Open Decision A — pitch / customer-requirements doc / use-case bodies). Absent → the planner defaults to the pitch and records the choice in assumptions[]. The written registry lands at shapeup/<slug>/requirements.md (RequirementClause rows)."
+          "enum": ["full", "board-only", "reconcile", "retrofit-surface"],
+          "description": "building (operation: plan, step: spec): how the spec substep is scoped — full (tree + board), board-only (a committed tree is frozen; only the per-machine board is regenerated), reconcile (discovered items fold in; invariants and the Test Surface are append-only), retrofit-surface (append the Test Surface to a spec that predates it). Absent = full."
         },
-        "project_profile": {
-          "type": "string",
-          "description": "solution-architect (operation: wire): path to the SHARED project-profile.md (archetype + entry_point) — the reachability seam the wiring map is authored against. Absent orchestrated → ESCALATE, never guess the entry point."
-        },
-        "scope_id": {
-          "type": "string",
-          "description": "scope-architect (map-scopes): the stuck scope · scope-hammer (--breaker inner): the exhausted scope."
+        "kb_rules_paths": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "building (operation: plan): the knowledge-base files the planning activity reads — its own (`plan`) and the three it was filed under before the fold (ba-pitch-analyzer, scope-architect, solution-architect). Whether each exists is for the loop to see; steering, never spec and never a gate."
         },
         "dimensions": {
           "type": "array",
           "items": {
             "type": "string"
           },
-          "description": "spec-evaluator: the active dimension set. harness compile fills it on every evaluate order: the run's named set, or the set resolved from the spec with the judge's auto-enable rules. Absent only on a standalone order."
+          "description": "spec-evaluator: the active dimension set. the loop fills it on every evaluate order: the run's named set, or the set resolved from the spec with the judge's auto-enable rules. Absent only on a standalone order."
         },
         "run_cmd": {
           "type": "string",
@@ -2431,7 +1806,7 @@
         },
         "launch_cmd": {
           "type": "string",
-          "description": "spec-evaluator, qa-edge-hunter: the project profile's launch probe — installs the built artifact, starts it and asserts the first screen. Derived by `harness compile` from project-profile.md, absent when the profile declares none. Where `run_cmd` is only a build, this is how the app is brought up; a non-zero exit is a finding, not a reason to guess another way."
+          "description": "spec-evaluator, qa-edge-hunter: the project profile's launch probe — installs the built artifact, starts it and asserts the first screen. Derived by `the loop` from project-profile.md, absent when the profile declares none. Where `run_cmd` is only a build, this is how the app is brought up; a non-zero exit is a finding, not a reason to guess another way."
         },
         "revised_checks": {
           "type": "array",
@@ -2444,16 +1819,16 @@
             },
             "required": ["id", "file"]
           },
-          "description": "spec-evaluator: rows that FAILed in one of the round's T0 trials and PASS in a later one whose own check file (named by the row id) changed in between. Derived by harness compile. Each must be read against its row before its PASS counts; absent when none."
+          "description": "spec-evaluator: rows that FAILed in one of the round's T0 trials and PASS in a later one whose own check file (named by the row id) changed in between. Derived by the loop. Each must be read against its row before its PASS counts; absent when none."
         },
         "scopes_without_t0": {
           "type": "array",
           "items": { "type": "string" },
-          "description": "spec-evaluator: scopes whose contract exists but which hold no green T0 verdict for the round, while at least one other scope does. Derived by harness compile. The round is still gradeable: each row such a scope owns is a FAIL citing the scope contract, never a reason to refuse the round. Absent when every scope is green."
+          "description": "spec-evaluator: scopes whose contract exists but which hold no green T0 verdict for the round, while at least one other scope does. Derived by the loop. The round is still gradeable: each row such a scope owns is a FAIL citing the scope contract, never a reason to refuse the round. Absent when every scope is green."
         },
         "build_gate": {
           "type": "string",
-          "description": "spec-evaluator, qa-edge-hunter: this run's newest round build gate artifact (build/r<N>-t<T>.json) — each step's exit code and output tail, the record that the build ran and the app launched. Derived by `harness compile`, absent when the gate never ran. Read it before grading a [ui] row NO EVIDENCE."
+          "description": "spec-evaluator, qa-edge-hunter: this run's newest round build gate artifact (build/r<N>-t<T>.json) — each step's exit code and output tail, the record that the build ran and the app launched. Derived by `the loop`, absent when the gate never ran. Read it before grading a [ui] row NO EVIDENCE."
         },
         "t0_artifacts": {
           "type": "array",
@@ -2489,38 +1864,11 @@
         "round": {
           "type": "integer",
           "description": "the round this order is counted against."
-        },
-        "baseline": {
-          "type": "string",
-          "description": "scope-hammer: shaping/baseline.md — comparison anchor (absent → the pitch's problem statement, flagged approximate)."
-        },
-        "breaker": {
-          "type": "string",
-          "enum": [
-            "outer",
-            "inner"
-          ],
-          "description": "scope-hammer: which circuit breaker fired (absent = normal stop, all scopes FINISHED)."
-        },
-        "feedback": {
-          "type": "string",
-          "description": "coach: the PO's raw L4 feedback to distill and categorize at GATE COACH-1."
-        },
-        "intake": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "translator: source docs to normalize to English (originals never overwritten)."
-        },
-        "glossary": {
-          "type": "string",
-          "description": "translator: existing glossary.md to reuse as the base term map."
         }
       }
     },
     "HammerCensus": {
-      "description": "Scope-hammer's census as data — the proposal GATE L4's resolver reads before it lets an answer set say `ship`. Written by the hammer at `.shapeup/<slug>/reports/hammer-census.json`, the only path its order's substrate permits besides the committed report. A proposal, never a decision: promotion and shipping stay the PO's call, and ingest never acts on it.",
+      "description": "The stop census as data — the proposal GATE L4's resolver reads before it lets an answer set say `ship`. Written by the loop's stop step at `.shapeup/<slug>/reports/hammer-census.json` (the name is older than the step), read back against this shape by the loop before GATE H, and stopped on, when it is not this shape. A proposal, never a decision: promotion and shipping stay the PO's call, and the loop never acts on it.",
       "x-tier": "LOCAL",
       "x-location": ".shapeup/<slug>/reports/hammer-census.json",
       "type": "object",
@@ -2535,221 +1883,13 @@
         "baseline": { "type": ["string", "null"], "description": "The baseline the comparison ran against, or null when the pitch's problem statement stood in for it." }
       }
     },
-    "ResumeState": {
-      "description": "The fast-forward derivation: which phase a launch resumes at, derived from artifacts on disk and NEVER from stored state or conversation memory. Produced by kernel/probe/resume.mjs on stdout and consumed by shapeup-run.js's preamble on every launch, fresh or relaunch alike. Every phase predicate is an artifact test — `has_orient_artifacts` exists because the ORIENT branch was once gated on the ledger's stored `status` instead, which a silent courier failure left stale, and a completed ORIENT phase was re-dispatched on resume. `next_phase` is a convenience derived from the same booleans, which all travel too: a caller is never forced to trust a summary it cannot re-derive.",
-      "x-tier": "EMBEDDED",
-      "x-location": "stdout of harness probe resume — never written to disk (the run's state IS the artifacts this record reports on)",
-      "x-writer": "harness probe resume (deriving; the same script's --set-status / --set-active-scope operations write, and report their own outcome record instead)",
-      "x-readers": "shapeup-run.js (the fast-forward preamble, one call per launch)",
-      "type": "object",
-      "required": [
-        "intake_path",
-        "status",
-        "has_orient_artifacts",
-        "has_spec_tree",
-        "has_wiring_map",
-        "scope_files",
-        "pending_orders",
-        "eval_rounds_done",
-        "next_phase"
-      ],
-      "properties": {
-        "intake_path": {
-          "type": "string",
-          "description": "Resolved path to the run's intake — the pitch a fresh ORIENT dispatch is compiled against."
-        },
-        "breadboard_path": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "Resolved path to the run's staged breadboard (`.shapeup/<slug>/breadboard.md`), the pitch's second half, handed to the four planning dispatches as payload.breadboard. Null when the pitch had no separate breadboard file."
-        },
-        "breadboard_source": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "How `init run` found the breadboard — flag | sibling | shaping-dir | shared-root | embedded — read from the receipt. Null when there was none or the receipt is unreadable."
-        },
-        "spec_folder": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "From harness-run.md frontmatter; null before the ledger names one."
-        },
-        "status": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "The ledger's stored status, reported for the readers that legitimately hold a MID_RUN set over it (harness reduce snapshot, and the ship report's census). NOT a resume predicate: no phase decision in shapeup-run.js may branch on this field."
-        },
-        "closed_status": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "The ledger's closed_status: the terminal status of a close nobody has taken back, null on a run that is open. A relaunch reads it once, to reopen the run before its first gate resolves. Not a phase predicate either."
-        },
-        "lens": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "From harness-run.md frontmatter; forwarded to the analyze dispatch. Null when the ledger names none — an unknown value is an ABSENT key in the order, never a null."
-        },
-        "stack": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "From harness-run.md frontmatter; forwarded to the orient dispatch. Null when the ledger names none."
-        },
-        "run_cmd": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "How to run the feature, from harness-run.md frontmatter; forwarded to the evaluate dispatch so the judge exercises a running thing. Null when the ledger names none."
-        },
-        "app_url": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "description": "Where the feature answers, from harness-run.md frontmatter; forwarded to the QA hunt. Null when the ledger names none."
-        },
-        "eval_dimensions": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "The dimensions this run's EVAL grades, from harness-run.md frontmatter. Defaults to [\"spec-conformance\"] rather than empty, so a ledger that names none still produces a graded run — and the ship sign-off reports the complement as the dimensions the run did NOT cover."
-        },
-        "orient_dir": {
-          "type": "string",
-          "description": "The run's LOCAL orient directory, resolved for the analyze dispatch: ORIENT's spike and code-surface notes are working artifacts, not deliverables, so they live in the gitignored tier (ADR-0001)."
-        },
-        "has_orient_artifacts": {
-          "type": "boolean",
-          "description": "ORIENT finished: orient/ carries code-surface.md, discovered-seed.md, hill-signal.md and at least one spike-*.md (skills/orient/SKILL.md §Outputs). The ORIENT skip gates on THIS."
-        },
-        "has_spec_tree": {
-          "type": "boolean",
-          "description": "ANALYZE finished: the spec folder's usecases/ carries at least one use case that is not _index.md. WIRE reads these — one wiring-map entry per use case — which is why ANALYZE precedes WIRE in the phase chain: dispatched against an empty spec folder, WIRE escalates on every launch."
-        },
-        "has_board": { "type": "boolean", "description": "The per-machine board (tasks/TASK-*.md) holds at least one task. ANALYZE is complete only with both the committed spec tree and this; a committed tree with no board resumes at analyze, where the board-only operation regenerates it." },
-        "staged_workflow": {
-          "type": "object",
-          "description": "Whether the orchestrator this launch will execute is the installed one. A run stages its own copy of the workflow scripts when it is OPENED and keeps them for its life — right for a run in flight, and silent: relaunching after an upgrade executes the OLD orchestrator, reports normally, and every observation is of the previous release. `checked: false` means the comparison could not be made (no plugin root, nothing staged), which is not the same fact as agreement. A warning, never a block: opening a new run is how an upgrade is soaked.",
-          "properties": {
-            "checked": { "type": "boolean" },
-            "drift": { "type": "array", "items": { "type": "string" }, "description": "Staged scripts whose bytes differ from the installed plugin's." },
-            "installed_version": { "type": ["string", "null"] },
-            "run_version": { "type": ["string", "null"], "description": "The plugin version the run's receipt records — what this run actually opened under." },
-            "warning": { "type": "string" }
-          }
-        },
-        "has_requirements": {
-          "type": "boolean",
-          "description": "The requirements registry is on disk: shapeup/<slug>/requirements.md exists. A PLAIN FACT, not a phase — the orchestrator guards its single `coverage` dispatch on this boolean, and it is deliberately absent from kernel/probe/resume.mjs's PHASE_ARTIFACT map, which doubles as nextPhase()'s ordered list: an entry there would fast-forward every run recorded before the registry existed to the registry instead of to build."
-        },
-        "has_wiring_map": {
-          "type": "boolean",
-          "description": "WIRE finished: shapeup/<slug>/wiring-map.md exists."
-        },
-        "project_profile_path": {
-          "type": "string"
-        },
-        "has_project_profile": {
-          "type": "boolean",
-          "description": "tech-lead writes project-profile.md at GATE L0, before the launch; trace-lint resolves reachability by its archetype."
-        },
-        "scope_files": {
-          "type": "array",
-          "description": "MAP SCOPES finished when non-empty. Each entry carries a RESOLVED path, never a bare filename — harness compile and harness verify t0 resolve --scope against cwd, and a bare id makes compile-order exit 2, which the attempt loop reads as the stagnation breaker.",
-          "items": {
-            "type": "object",
-            "required": [
-              "scope_id",
-              "path"
-            ],
-            "properties": {
-              "scope_id": {
-                "type": "string"
-              },
-              "path": {
-                "type": "string"
-              }
-            }
-          }
-        },
-        "scope_waves": {
-          "type": "array",
-          "description": "The same scopes as scope_files, grouped into dependency WAVES: no wave contains a scope that depends on one still in flight. Levelled by `probe resume` from each contract's own `depends_on` — declared in the same COMMITTED tier as the contracts it orders, so it survives the clone that a join through machine-local task ids never could. Under the edge-released scheduler this is an ORDER and a cross-check rather than a barrier: the orchestrator trusts `scope_deps` only when Kahn-levelling it reproduces this field, so an edge lost crossing the sub-agent boundary degrades to wave release instead of starting a scope early. ADDITIVE: a consumer that ignores it, or a tree where no contract declares `depends_on`, every declared id names a scope not in the run, or the relation is cyclic, gets a single wave containing everything, which is the unscheduled fixed-width fan-out this replaced.",
-          "items": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            }
-          }
-        },
-        "scope_deps": {
-          "type": "array",
-          "description": "The dependency edges the waves were levelled from, as `[dependant, dependency]` pairs, so a scope can be released the moment ITS OWN dependencies are green rather than when its whole wave finishes. Same parse as scope_waves; the two validate each other. ADDITIVE — absent, unusable or disagreeing with scope_waves, release falls back to the wave boundary.",
-          "items": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            }
-          }
-        },
-        "scope_exclusions": {
-          "type": "array",
-          "description": "Pairs of scopes that may not build AT THE SAME TIME because both declare a write to one path — `substrate.shared` is the sanctioned escape from the disjointness rule, so the lint passes it and the substrate wall permits that path to every live order. Measured: three concurrent writers to one entry point lost work in 20 of 20 trials, because an edit is read-modify-write and the later writer drops the earlier one silently. Unlike scope_deps these pairs are UNORDERED — neither scope waits for the other, they merely never overlap — and unlike a dependency they cost concurrency rather than buying correctness in sequence, which is why the release ceiling they imply is reported before a run spends anything.",
-          "items": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            }
-          }
-        },
-        "pending_orders": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Order files with no result beside them. Diagnostic only — build orders carry no scope id, so this set is not an audit trail of build dispatches (see harness compile's order-id note)."
-        },
-        "eval_rounds_done": {
-          "type": "array",
-          "items": {
-            "type": "integer"
-          },
-          "description": "Round numbers whose evaluate-r<n>.json holds a verdict the run may act on (PASS/FAIL, citing T0 artifacts when the spec is scoped) — the resumed run's round counter starts one past the maximum. A refused or uncited round is not done: the relaunch re-enters it."
-        },
-        "next_phase": {
-          "type": "string",
-          "enum": [
-            "orient",
-            "analyze",
-            "wire",
-            "map-scopes",
-            "build"
-          ],
-          "description": "The first phase whose artifacts are incomplete. Derived from the booleans above, in that order. The same table (harness probe resume PHASE_ARTIFACT) answers `--require <phase>`, the post-condition shapeup-run.js checks after every phase dispatch — resume and completion are ONE predicate by construction."
-        }
-      }
-    },
     "RunArgs": {
-      "description": "C1 — the launch half of the workflow's only conversation. Resolved ONCE at GATE L0 from harness init run output + the L0.8 model matrix + budgets, then built by `harness init run-args`, which writes it to .shapeup/<slug>/run-args.json AND prints it — tech-lead passes that printed value to the harness run launch as one JSON literal, never a second, hand-typed copy of it. The workflow cannot ask follow-ups and cannot read config files itself, so everything a run will ever need travels in this one record. A workflow script validates its own subset of this shape in code (no runtime schema check at the C1 boundary itself); this entry is the central-registry definition the workflow script, `harness init run-args` and the tech-lead skill all read as the one true shape.",
-      "x-tier": "EMBEDDED",
-      "x-location": ".shapeup/<slug>/run-args.json — written fresh on every launch and relaunch by `harness init run-args`; the workflow receives it as its args and never reads other config",
-      "x-writer": "harness init run-args (kernel), invoked by tech-lead at GATE L0 on every launch AND every relaunch after a paused gate",
-      "x-readers": "the Workflow runtime (shapeup-run, and shapeup-run's own inner round dispatch)",
-      "x-not-here": "Run config the LEDGER already carries does NOT get a second home in RunArgs — eval_dimensions, lens, spec_folder, stack, run_cmd, app_url are read off harness-run.md frontmatter by resume-state on every launch AND every relaunch, so a copy here would be a second source that can disagree with the first. RunArgs carries what a workflow cannot derive from disk (identity, budgets, the model matrix, pluginRoot, startedAt) plus noEval, which no frontmatter line holds.",
+      "description": "The launch record — what a run was launched with, resolved once and written to .shapeup/<slug>/run-args.json by `harness init run` in the same act as the receipt. Every switch the operator typed lands here or does nothing: the loop that drives the run reads nothing but this record and the artifacts, and the loop reads `noEval` to refuse writing a PASS report over a run launched with no evaluation. The model floor (sonnet or above for `exec` and, unless `noEval`, `eval`) is enforced when the record is written and again when the loop reads it.",
+      "x-tier": "LOCAL",
+      "x-location": ".shapeup/<slug>/run-args.json — written fresh when a run is opened (and again by `init run --force`); an already-open run keeps the record it has",
+      "x-writer": "harness init run (kernel), from the same parsed argv as the receipt",
+      "x-readers": "harness probe next (the loop's state machine), harness reduce ship (the no-evaluation guard), harness probe resume",
+      "x-not-here": "Run config the LEDGER already carries does NOT get a second home in the record — eval_dimensions, lens, spec_folder, stack, run_cmd, app_url are read off harness-run.md frontmatter, so a copy here would be a second source that can disagree with the first. The record carries what no artifact on disk holds: identity, budgets, the model matrix, pluginRoot, startedAt, and the skip switches (noEval, noQa).",
       "type": "object",
       "required": [
         "slug",
@@ -2766,7 +1906,7 @@
         },
         "runId": {
           "type": "string",
-          "description": "OPTIONAL (v1.8) — the run key, COPIED from harness init run's `run_id` output. Carried here so harness run stamps every journal row without a receipt lookup per launch; a launch without it falls back to reading the receipt, so this is an optimisation, not the source of truth. This is identity, which x-not-here explicitly admits to RunArgs — it is not run config the ledger already carries.",
+          "description": "The run key, copied from the receipt `harness init run` wrote in the same act. Identity, not run config the ledger already carries; the receipt stays the source of truth.",
           "pattern": "^[a-z0-9][a-z0-9-]*-[0-9]{8}T[0-9]{6}Z-[0-9a-f]{8}$"
         },
         "autoLevel": {
@@ -2780,11 +1920,11 @@
         },
         "answers": {
           "type": "string",
-          "description": "A gate-answers preset name (ci|guarded|interactive) or a path to a gate-answers.json file — the ONLY thing that decides whether a gate crosses, pauses, or aborts."
+          "description": "A gate-answers preset name (ci|guarded|interactive) or a path to a gate-answers.json file (`init run --gate-answers`) — the ONLY thing that decides whether a gate crosses, pauses, or aborts. The same input the receipt's config records as gate_answers."
         },
         "models": {
           "type": "object",
-          "description": "The L0.8 role -> model matrix, resolved once. The model floor: sonnet or above on every role, including mechanical couriers — no exceptions.",
+          "description": "The L0.8 role -> model matrix, resolved once: a flag, else SHAPEUP_<ROLE>_MODEL, else sonnet; qa follows exec. The model floor: `exec` and `eval` are sonnet or above, refused at `init run`; `qa` is not checked, and `eval` is not under noEval.",
           "properties": {
             "exec": {
               "type": "string"
@@ -2799,7 +1939,7 @@
         },
         "budgets": {
           "type": "object",
-          "description": "The two RunArgs-level circuit breakers (AGENTS.md) — outer round_budget, inner attempt_budget. The third, opt-in DEADLINE breaker (the wall-clock budget) is NOT a RunArgs field: it is typed once, at `harness init run --wall-clock-budget`, and lands in the run receipt's `wall_clock_budget_s` — `harness verify budget` reads that receipt field directly and never sees this launch's RunArgs at all, so it has no member here to declare.",
+          "description": "The two record-level circuit breakers (AGENTS.md) — outer round_budget, inner attempt_budget. The third, opt-in DEADLINE breaker (the wall-clock budget) is NOT a record field: it is typed at `harness init run --wall-clock-budget` and lands in the run receipt's `wall_clock_budget_s`, which `harness verify budget` reads directly.",
           "properties": {
             "maxRounds": {
               "type": "integer"
@@ -2811,15 +1951,18 @@
         },
         "pluginRoot": {
           "type": "string",
-          "description": "${CLAUDE_PLUGIN_ROOT} — the only thing a workflow script may ever root a path in (a workflow has no filesystem of its own; every path it resolves is either rooted here or produced by a prior call's stdout)."
+          "description": "The plugin copy the run was opened against — the root every kernel path in an order is spelled from."
         },
         "startedAt": {
           "type": "string",
-          "description": "ISO timestamp, passed in because Date.now() is unavailable inside a workflow script by design — the deadline breaker (harness verify budget) computes elapsed time itself, in Node, where the clock lives."
+          "description": "ISO timestamp the run was opened at, the same instant as the receipt's started_at."
         },
         "lane": {
-          "$ref": "#/$defs/Lane",
-          "description": "The fit-check verdict (full|tiny) — compiles away into existing knobs; never rides in WorkOrderPayload."
+          "type": "string",
+          "enum": [
+            "full"
+          ],
+          "description": "The lane the launch asked for (`init run --lane full`). Only the full lane is served; the small-change lane retired and `tiny` is refused at the launch. Never rides in WorkOrderPayload."
         },
         "noEval": {
           "type": "boolean",
@@ -2827,7 +1970,7 @@
         },
         "noQa": {
           "type": "boolean",
-          "description": "If true, skips the QA Edge Hunt (`--no-qa`). Rides here for the same reason as noEval: no frontmatter line carries it. It is declared because the workflow reads it — an arg the script consumes and this record omits is a switch the launcher never learns to send, which is a documented flag that does nothing."
+          "description": "If true, skips the QA Edge Hunt (`--no-qa`). Rides here for the same reason as noEval: no frontmatter line carries it. It is declared because the loop reads it — a switch the record omits is a documented flag that does nothing."
         },
         "maxParallelScopes": {
           "type": "integer",
@@ -2840,128 +1983,6 @@
           "description": "If true, each FAIL finding gets one independent skeptic before it costs a whole fix round (`--adversarial-verify`). Off by default: it is a pure addition that spends one sub-agent per finding, and the single-judge invariant is unaffected — a refutation retracts a finding, it never issues a verdict."
         }
       }
-    },
-    "RunReturn": {
-      "description": "C1 — the return half of the workflow's only conversation. The ONLY way the workflow speaks back to tech-lead, so it is a tagged union keyed on `status` — the skill branches on the tag, never on prose (the same exit-code discipline harness gate already applies to gate sign-off, extended to the orchestrator's own return value). A gate resolved 'ask' (exit 4) always returns `paused`; a gate resolved 'abort' (exit 5) always returns `aborted`; any circuit breaker tripping (outer round_budget, inner attempt_budget, or the deadline breaker) returns `gate_h`; a full run whose final EVAL passes returns `shipped`. The union is written as a superset of what one inner round can itself produce (`paused`, `aborted`, `gate_h`, or a round-complete carrying a verdict) — `shipped` belongs only to a full run. It is deliberately NOT narrowed, because the round-scoped subset is what a `workflow()` child would return if the fan-out this design anticipates ever spends that nesting level.",
-      "x-tier": "EMBEDDED",
-      "x-location": "in-memory only — a Workflow return value, never written to disk",
-      "x-writer": "the workflow runtime (shapeup-run — the sole writer)",
-      "x-readers": "tech-lead (branches on `status`, emits `block` verbatim on a pause, never re-summarizes it)",
-      "type": "object",
-      "required": [
-        "status"
-      ],
-      "properties": {
-        "status": {
-          "type": "string",
-          "enum": [
-            "shipped",
-            "paused",
-            "aborted",
-            "gate_h",
-            "ok"
-          ],
-          "description": "shipped = the happy ending (outer run only) · paused = a gate resolved 'ask', relaunch after a recorded decision · aborted = a gate resolved 'abort', attributable stop · gate_h = a circuit breaker tripped, ship what is green · ok = one inner round completed (build+eval), not itself a ship — the outer loop decides whether to loop again."
-        },
-        "verdict": {
-          "type": "string",
-          "enum": [
-            "pass",
-            "fail",
-            "not-evaluated"
-          ],
-          "description": "shipped | ok: the round or run's EVAL verdict, lowercased from spec-evaluator's PASS|FAIL — or `not-evaluated` when a `shipped` return closed a `--no-eval` run, which reaches SHIP without ever dispatching the judge. Recorded plainly, never upgraded to `pass` (references/protocol.md)."
-        },
-        "rounds_used": {
-          "type": "integer"
-        },
-        "dims_evaluated": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "The dimensions the last evaluate order named: the set the PO chose at L0.5, or the one resolved from the spec."
-        },
-        "dims_not_evaluated": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "qa_findings": {
-          "type": "integer"
-        },
-        "qa": {
-          "type": "string",
-          "enum": ["run", "not-hunted", "skipped"],
-          "description": "What QA amounted to: run (at least one charter ran), not-hunted (the hunt returned and ran no charter), skipped (--no-qa or the QA gate answered skip). qa_findings is 0 in the last two for different reasons."
-        },
-        "report": {
-          "type": "string",
-          "description": "shipped: shapeup/<slug>/REPORT.md path."
-        },
-        "state_warnings": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "shipped | gate_h: bookkeeping writes that did not take (a ledger status that read back wrong), carried on the ONE channel a headless launch preserves. The workflow's own log() goes to the progress narrator and `claude -p` stdout carries only the final message, so a run that returned `shipped` over a ledger still reading `evaluating` could not be told from one that warned about it. Absent when every state write took. Diagnostic, never a status: a lost bookkeeping write is a degraded digest, not a corrupted build."
-        },
-        "round": {
-          "type": "integer",
-          "description": "ok: which round this return describes."
-        },
-        "paused_at": {
-          "type": "string",
-          "description": "paused: the gate id that resolved 'ask' (e.g. L1b, L2, L3)."
-        },
-        "block": {
-          "type": "string",
-          "description": "paused: the ⏸ gate block, emitted VERBATIM by the skill — the block is the handoff contract; re-phrasing it is the paraphrase channel this design exists to close."
-        },
-        "valid_decisions": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "paused: the decisions VALID_BY_GATE allows at this gate (harness gate)."
-        },
-        "context": {
-          "type": "object",
-          "description": "paused: whatever facts the paused gate needs the PO to see (round, scope counts, spec_lint status, …)."
-        },
-        "aborted_at": {
-          "type": "string",
-          "description": "aborted: the gate id that resolved 'abort'."
-        },
-        "reason": {
-          "type": "string",
-          "description": "aborted: the attributable reason (harness gate's own `reason` field, carried through verbatim)."
-        },
-        "breaker": {
-          "type": "string",
-          "enum": [
-            "outer",
-            "inner",
-            "deadline"
-          ],
-          "description": "gate_h: which of the three breakers fired (AGENTS.md's three-level circuit breaker)."
-        },
-        "hammer_proposals": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "gate_h | ok: scope ids queued for GATE H's census (scope-hammer) — an exhausted scope never blocks the round, it proposes."
-        },
-        "green_scopes": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "gate_h | ok: scope ids that reached T0-green this round."
-        }
-      }
     }
   }
 }