sortie-dogs 0.9.10 → 0.9.11

package/README.md

@@ -20,9 +20,42 @@ bounded implementation, canonical validation, and evidence-backed completion.
 
 Requirements: Node.js 22.6 or newer, npm, and OpenCode.
 
-Guides: [日本語](docs/guide-ja.md) · [简体中文](docs/guide-zh-CN.md) · [CLI testing](docs/cli-testing.md)
+Guides: [日本語](docs/guide-ja.md) · [简体中文](docs/guide-zh-CN.md) · [テスト実行](docs/testing.md) · [CLI testing](docs/cli-testing.md)
 
-Release: [v0.9.10](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.9.10)
+Release: [v0.9.11](https://github.com/zufall-upon/Sortie-dogs/releases/tag/v0.9.11)
+
+## Provisional quality–cost position
+
+**Reference values, not a successful benchmark claim.** Quality and end-to-end completion
+problems remain. The latest completed qualification attempt ended at `IN_PROGRESS`, so its official
+verifier was not run. Further benchmarks are frozen while completion defects are repaired.
+
+The last complete measured **Bare OpenCode vs Sortie** pair below used one frozen task,
+`datacurve/anko-typed-variable-bindings`, on 2026-09-10. It used Sortie **v0.9.5**, not the
+current release. Both candidates failed the official verifier.
+
+| Metric · one task, one trial per arm | Bare OpenCode | Sortie v0.9.5 |
+| --- | ---: | ---: |
+| Verified PASS | 0/1 | 0/1 |
+| Task-check completion · F2P | 55.6% · 5/9 | 88.9% · 8/9 |
+| Retained checks · P2P | 94/94 | 93/94 |
+| Estimated API-equivalent total cost | $5.42 | $1.46 |
+| Median agent wall · n=1 | 28.7 min | 10.0 min |
+| Premium-model token share · Sol | 100% | 20.1% |
+
+Later Sortie-only evidence is weaker: the v0.9.9 recovery candidate passed **5/9** task
+checks with **0/1 Verified PASS**; `0.9.11-bench.2` did not reach a gradeable completion.
+Those attempts are not pooled into the historical pair above.
+
+![Historical quality–cost reference: Bare at $5.42 and 55.6% task-check completion; Sortie v0.9.5 at $1.46 and 88.9%. Neither achieved Verified PASS.](docs/assets/quality-cost-reference.svg)
+
+The goal is **higher OpenCode task success with selective use of premium models**.
+These reference observations do not yet establish that success-rate claim: Sortie missed
+one task check and regressed one retained check. Codex, Pi, and Oh My OpenCode belong to
+separate methodologies and are not assigned comparable positions on this chart.
+
+[Definitions, frozen inputs, current failure status, and limitations](docs/benchmark-reference.md)
+· [Machine-readable reference values](docs/benchmarks/provisional-reference.json)
 
 ## Why Sortie-dogs?
 

package/dist/asset-version.d.ts

@@ -2,5 +2,5 @@
  * Version of the installable runtime assets. Kept in its own module so the plugin can compare an
  * installed project marker without importing every asset body.
  */
-export declare const RUNTIME_ASSET_VERSION = "0.3.86-codegen-proof-v1";
+export declare const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";
 export type RuntimeAssetVersion = typeof RUNTIME_ASSET_VERSION;

package/dist/asset-version.js

@@ -2,4 +2,4 @@
  * Version of the installable runtime assets. Kept in its own module so the plugin can compare an
  * installed project marker without importing every asset body.
  */
-export const RUNTIME_ASSET_VERSION = "0.3.86-codegen-proof-v1";
+export const RUNTIME_ASSET_VERSION = "0.3.89-completion-proof-v1";

package/dist/core/worktree-commit-artifact.js

@@ -978,11 +978,11 @@ async function stagedPaths(context) {
     return new Set(fields);
 }
 async function assertNoSubmodules(context, entries) {
-    for (const entry of entries) {
-        const index = await context.git(["ls-files", "--stage", "-z", "--", entry.path]);
-        if (index.toString("utf8").startsWith("160000 ")) {
-            throw new WorktreeCommitArtifactError("invalid-state", "Submodule changes are forbidden.");
-        }
+    if (entries.length === 0)
+        return;
+    const index = await context.git(["ls-files", "--stage", "-z", "--", ...entries.map(({ path }) => path)]);
+    if (index.toString("utf8").split("\0").some((entry) => entry.startsWith("160000 "))) {
+        throw new WorktreeCommitArtifactError("invalid-state", "Submodule changes are forbidden.");
     }
 }
 function decodeGitOutput(source, message) {
@@ -1261,7 +1261,7 @@ export async function produceWorktreeCommitArtifact(request, control) {
         throw new WorktreeCommitArtifactError("validation-failed", "Validation was cancelled.");
     control?.enterProtectedPhase();
     await context.git(["add", "--", ...before.map(({ path }) => path)]);
-    await assertValidatedIndex(context, before, beforeFingerprint);
+    // Keep one fresh index check after staging, immediately before the protected commit.
     await assertValidatedIndex(context, before, beforeFingerprint);
     await context.git([
         "-c", "user.name=Sortie Fabric",

package/dist/core/worktree-parallel-dispatch.js

@@ -2138,57 +2138,79 @@ export class ParallelDispatchCoordinator {
         };
     }
     async buildFabricCandidate(runID, base, tasks) {
+        if (tasks.length === 0)
+            return base;
         let head = base;
-        for (const task of tasks) {
-            const artifact = task.artifact;
-            const nonce = randomUUID();
-            const indexPath = join(this.stateRoot, `.fabric-index-${nonce}`);
-            const patchPath = join(this.stateRoot, `.fabric-patch-${nonce}`);
-            const messagePath = join(this.stateRoot, `.fabric-message-${nonce}`);
-            const indexEnvironment = this.cleanGitEnvironment({ GIT_INDEX_FILE: indexPath });
-            try {
-                await this.gitBuffer(["read-tree", head], indexEnvironment);
-                const patch = await this.gitBuffer([
-                    "diff-tree", "-p", "--binary", "--full-index", "--no-ext-diff", "--no-renames",
-                    artifact.base_sha, artifact.commit_sha, "--",
-                ]);
-                if (patch.byteLength > 8 * 1024 * 1024) {
-                    throw new ParallelDispatchError("wave-integration-failed", "Fabric artifact patch exceeds the practical bound.");
-                }
-                await writeFile(patchPath, patch, { flag: "wx", mode: 0o600 });
-                await this.gitBuffer(["apply", "--cached", "--3way", "--binary", patchPath], indexEnvironment);
-                const tree = (await this.gitBuffer(["write-tree"], indexEnvironment)).toString("utf8").trim();
-                const timestamp = (await this.gitBuffer(["show", "-s", "--format=%ct", artifact.commit_sha])).toString("utf8").trim();
-                if (!SHA.test(tree) || !/^\d{1,12}$/u.test(timestamp))
+        const indexPath = join(this.stateRoot, `.fabric-index-${randomUUID()}`);
+        const indexEnvironment = this.cleanGitEnvironment({ GIT_INDEX_FILE: indexPath });
+        try {
+            // Commit objects are immutable; collect their timestamps once for this build only.
+            const commits = [...new Set(tasks.map((task) => task.artifact.commit_sha))];
+            const metadata = (await this.gitBuffer([
+                "show", "-s", "--no-walk=unsorted", "--format=%H%x00%ct", ...commits, "--",
+            ])).toString("utf8").trimEnd();
+            const timestamps = new Map();
+            for (const line of metadata.split(/\r?\n/u)) {
+                const fields = line.split("\0");
+                if (fields.length !== 2 || !SHA.test(fields[0]) || !/^\d{1,12}$/u.test(fields[1]) || timestamps.has(fields[0])) {
                     throw new Error("identity");
-                const message = `Sortie fabric integration: ${task.descriptor.task_id}\n\n` +
-                    `Sortie-Run: ${runID}\nSortie-Task: ${task.descriptor.task_id}\n` +
-                    `Sortie-Artifact: ${artifact.commit_sha}\nSortie-Base: ${artifact.base_sha}\n`;
-                await writeFile(messagePath, message, { flag: "wx", mode: 0o600 });
-                const commitEnvironment = this.cleanGitEnvironment({
-                    GIT_AUTHOR_NAME: "Sortie Fabric",
-                    GIT_AUTHOR_EMAIL: "sortie@example.invalid",
-                    GIT_COMMITTER_NAME: "Sortie Fabric",
-                    GIT_COMMITTER_EMAIL: "sortie@example.invalid",
-                    GIT_AUTHOR_DATE: `${timestamp} +0000`,
-                    GIT_COMMITTER_DATE: `${timestamp} +0000`,
-                });
-                const commit = (await this.gitBuffer(["commit-tree", tree, "-p", head, "-F", messagePath], commitEnvironment))
-                    .toString("utf8").trim();
-                if (!SHA.test(commit))
-                    throw new Error("commit");
-                head = commit;
-            }
-            catch (error) {
-                if (error instanceof ParallelDispatchError)
-                    throw error;
-                throw new ParallelDispatchError("wave-integration-failed", "Fabric artifact could not be applied to the hidden candidate.");
+                }
+                timestamps.set(fields[0], fields[1]);
             }
-            finally {
-                await Promise.all([indexPath, `${indexPath}.lock`, patchPath, messagePath].map((path) => rm(path, { force: true }).catch(() => undefined)));
+            if (timestamps.size !== commits.length || commits.some((commit) => !timestamps.has(commit)))
+                throw new Error("identity");
+            await this.gitBuffer(["read-tree", base], indexEnvironment);
+            for (const task of tasks) {
+                const artifact = task.artifact;
+                const nonce = randomUUID();
+                const patchPath = join(this.stateRoot, `.fabric-patch-${nonce}`);
+                const messagePath = join(this.stateRoot, `.fabric-message-${nonce}`);
+                try {
+                    const patch = await this.gitBuffer([
+                        "diff-tree", "-p", "--binary", "--full-index", "--no-ext-diff", "--no-renames",
+                        artifact.base_sha, artifact.commit_sha, "--",
+                    ]);
+                    if (patch.byteLength > 8 * 1024 * 1024) {
+                        throw new ParallelDispatchError("wave-integration-failed", "Fabric artifact patch exceeds the practical bound.");
+                    }
+                    await writeFile(patchPath, patch, { flag: "wx", mode: 0o600 });
+                    await this.gitBuffer(["apply", "--cached", "--3way", "--binary", patchPath], indexEnvironment);
+                    const tree = (await this.gitBuffer(["write-tree"], indexEnvironment)).toString("utf8").trim();
+                    const timestamp = timestamps.get(artifact.commit_sha);
+                    if (!SHA.test(tree) || timestamp === undefined)
+                        throw new Error("identity");
+                    const message = `Sortie fabric integration: ${task.descriptor.task_id}\n\n` +
+                        `Sortie-Run: ${runID}\nSortie-Task: ${task.descriptor.task_id}\n` +
+                        `Sortie-Artifact: ${artifact.commit_sha}\nSortie-Base: ${artifact.base_sha}\n`;
+                    await writeFile(messagePath, message, { flag: "wx", mode: 0o600 });
+                    const commitEnvironment = this.cleanGitEnvironment({
+                        GIT_AUTHOR_NAME: "Sortie Fabric",
+                        GIT_AUTHOR_EMAIL: "sortie@example.invalid",
+                        GIT_COMMITTER_NAME: "Sortie Fabric",
+                        GIT_COMMITTER_EMAIL: "sortie@example.invalid",
+                        GIT_AUTHOR_DATE: `${timestamp} +0000`,
+                        GIT_COMMITTER_DATE: `${timestamp} +0000`,
+                    });
+                    const commit = (await this.gitBuffer(["commit-tree", tree, "-p", head, "-F", messagePath], commitEnvironment))
+                        .toString("utf8").trim();
+                    if (!SHA.test(commit))
+                        throw new Error("commit");
+                    head = commit;
+                }
+                finally {
+                    await Promise.all([patchPath, messagePath].map((path) => rm(path, { force: true }).catch(() => undefined)));
+                }
             }
+            return head;
+        }
+        catch (error) {
+            if (error instanceof ParallelDispatchError)
+                throw error;
+            throw new ParallelDispatchError("wave-integration-failed", "Fabric artifact could not be applied to the hidden candidate.");
+        }
+        finally {
+            await Promise.all([indexPath, `${indexPath}.lock`].map((path) => rm(path, { force: true }).catch(() => undefined)));
         }
-        return head;
     }
     cleanGitEnvironment(extra = {}) {
         const environment = { ...process.env };

package/dist/plugin/index.js

@@ -2054,6 +2054,9 @@ export const SortieDogsPlugin = async (input, options) => {
             entry.execution.units.includes(reservation.unitID));
         const newEvidence = acceptedEvidence.filter((entry) => entry.measurement.criterion_ids.some((criterionID) => !state.satisfied_criteria.includes(criterionID)));
         const progress = newEvidence.length > 0;
+        // Revalidation can succeed for an already-satisfied criterion after a candidate change.
+        // New criterion coverage controls progress accounting, not the validation disposition.
+        const validated = acceptedEvidence.length > 0;
         const metadata = isRecord(output.metadata) ? output.metadata : undefined;
         const interrupted = metadata?.status === "cancel" || metadata?.status === "cancelled" ||
             output.status === "cancel" || output.status === "cancelled";
@@ -2063,12 +2066,12 @@ export const SortieDogsPlugin = async (input, options) => {
             execution.endedAt !== undefined && Date.parse(execution.startedAt) >= reservation.started - 1000 &&
             execution.outcome === "fail");
         const processDefect = !failedAcceptanceExecution && (childSessionID === undefined || hostBindingDefect ||
-            goalValidationDefects.has(childSessionID));
-        const resultClass = progress ? "acceptance" : interrupted ? "interrupted" : processDefect ? "process-defect" : "acceptance";
+            goalValidationDefects.has(childSessionID) || !validated);
+        const resultClass = validated ? "acceptance" : interrupted ? "interrupted" : processDefect ? "process-defect" : "acceptance";
         await ledger.appendGoal({ kind: "unit.settled", at: new Date().toISOString(),
             reservation_id: reservation.reservationID, receipt_id: goalFingerprint({ call_id: callID, output: outputText.slice(0, 2048) }),
             goal_id: state.goal_id, unit_id: reservation.unitID,
-            disposition: progress ? "succeeded" : interrupted ? "cancelled" : "failed", result_class: resultClass,
+            disposition: validated ? "succeeded" : interrupted ? "cancelled" : "failed", result_class: resultClass,
             progress_fingerprint: progress ? goalFingerprint(acceptedEvidence) : null,
             evidence: acceptedEvidence, elapsed_ms: Math.max(0, Date.now() - reservation.started), cost_usd: null });
         if (childSessionID !== undefined) {

package/dist/runtime-assets.d.ts

@@ -7,7 +7,7 @@ export interface RuntimeAsset {
 }
 export declare const runtimeAssets: readonly [{
     readonly name: "dog-coordinator";
-    readonly version: "0.3.86-codegen-proof-v1";
+    readonly version: "0.3.89-completion-proof-v1";
     readonly installPath: "agent/dog-coordinator.md";
     readonly content: `---
 description: Canonical MkII coordinator packaged by Sortie-dogs
@@ -1391,6 +1391,9 @@ criterion -> changed or inspected implementation path -> concrete exercising tes
 An aggregate validation command without that mapping is insufficient. Multi-form criteria must cover their
 materially distinct syntax, value-shape, scope, and error paths; any missing path remains UNPROVEN and requires
 continued implementation or validation. Include the complete trace in every high-risk SourceReview artifact.
+For accepted failure behavior, require result/error/state evidence and a valid case; for accepted composite
+or wrapped-value behavior, require public-entry-point evidence. Accept justified N/A dimensions and existing
+sufficient evidence without extra validation or review. Do not accept expectations copied from the candidate's output.
 Any generated input/output pair in the changed manifest is high risk and requires SourceReview. DONE requires
 generator command evidence, post-generation candidate identity, generated-output stability, and canonical
 validation after generation. Reject evidence produced only before regeneration.
@@ -1468,10 +1471,10 @@ TERMINAL_STATUS_SEMANTICS_FIXTURE
 END_TERMINAL_STATUS_SEMANTICS_FIXTURE
 
 RUNTIME_ASSET_VERSION_SYNC_FIXTURE
-    runtime_version: 0.3.86-codegen-proof-v1
+    runtime_version: 0.3.89-completion-proof-v1
     shared_marker: src/asset-version.ts
-    packaged_expectation: test/plugin-loader.test.ts uses 0.3.86-codegen-proof-v1
-    initialize_expectation: test/initialize.test.ts uses 0.3.86-codegen-proof-v1
+    packaged_expectation: test/plugin-loader.test.ts uses 0.3.89-completion-proof-v1
+    initialize_expectation: test/initialize.test.ts uses 0.3.89-completion-proof-v1
     rule: runtime asset versions, shared marker, packaged expectation, and initialize expectation change together
 END_RUNTIME_ASSET_VERSION_SYNC_FIXTURE
 
@@ -1494,32 +1497,32 @@ END_INTERNAL_TERMINAL_PROOF_FIXTURE
 `;
 }, {
     readonly name: "dog-worker";
-    readonly version: "0.3.86-codegen-proof-v1";
+    readonly version: "0.3.89-completion-proof-v1";
     readonly installPath: "agent/dog-worker.md";
     readonly content: string;
 }, {
     readonly name: "dog-luna-worker";
-    readonly version: "0.3.86-codegen-proof-v1";
+    readonly version: "0.3.89-completion-proof-v1";
     readonly installPath: "agent/dog-luna-worker.md";
     readonly content: string;
 }, {
     readonly name: "dog-scout";
-    readonly version: "0.3.86-codegen-proof-v1";
+    readonly version: "0.3.89-completion-proof-v1";
     readonly installPath: "agent/dog-scout.md";
     readonly content: "---\ndescription: Bounded evidence scout for dog-coordinator\nmode: subagent\nsteps: 8\npermission:\n  bash: deny\n  webfetch: deny\n  task: deny\n  question: deny\n  glob: deny\n  grep: deny\n  edit: deny\n  list: deny\n  write: deny\n  patch: deny\ntools:\n  bash: false\n  webfetch: false\n  task: false\n  question: false\n  glob: false\n  grep: false\n  edit: false\n  list: false\n  write: false\n  patch: false\n---\n# dog-scout\n\nAccept one concrete missing_evidence_code: manifest, validation, or owner-risk. Accept only an\nexplicit absolute project_root and a known_paths list of at most four paths from dog-coordinator.\nResolve only that evidence key from those paths under project_root; never resolve a path against the\nsession directory. Use Read only, with at most 120 lines and no more than one read per supplied path.\nDo not resolve a second key, explore, invoke another tool, retry, edit, stage, commit, or become user-facing.\n\nWhen project_root is missing, or a supplied path does not resolve under it, or a resolved path is\nunreadable, report that dispatch defect as the facts for the requested key and name the exact paths.\nDo not retry, guess another root, or answer from an unread path.\n\nReturn exactly one concise JSON object of at most 800 characters with exactly these keys:\nmissing_evidence_code, facts, evidence_paths, risks. Use no Markdown, code fence, commentary, or raw log. Return it only\nto dog-coordinator. Write the facts and risks prose in the language the dispatch uses for its own\nprose; keep the keys, paths, commands, and identifiers verbatim.\n";
 }, {
     readonly name: "dog-reviewer";
-    readonly version: "0.3.86-codegen-proof-v1";
+    readonly version: "0.3.89-completion-proof-v1";
     readonly installPath: "agent/dog-reviewer.md";
-    readonly content: "---\ndescription: Independent source reviewer for dog-coordinator\nmode: subagent\npermission:\n  bash: deny\n  webfetch: deny\n  task: deny\n  question: deny\n  glob: deny\n  grep: deny\n  edit: deny\n  list: deny\n  write: deny\n  patch: deny\n  read: deny\ntools:\n  bash: false\n  webfetch: false\n  task: false\n  question: false\n  glob: false\n  grep: false\n  edit: false\n  list: false\n  write: false\n  patch: false\n  read: false\n---\n# dog-reviewer\n\nAccept only one bounded SourceReview request from dog-coordinator after canonical\nvalidation for one high-risk candidate. Review only the supplied acceptance criteria, exact\nmanifest, changedLogicSummary, supplied changed-code excerpts, and validation evidence. Confirm every acceptance item explicitly\nmaps to at least one changedLogicSummary entry and assess that changed logic against the mapped\nacceptance item. Missing or incomplete coverage is a concrete finding, never PASS.\nRequire one indexed acceptance[i] -> changedLogicSummary[j] mapping line per acceptance item and\nreject a missing index or unequal mapping count before assessing the changed logic.\nAlso require each acceptance item to map to a concrete exercising test/input/branch and result. A broad\nsuite PASS without criterion-level exercise evidence is insufficient. When one item contains materially\ndifferent syntax forms, value shapes, scopes, or error paths, reject PASS unless representative traces cover\neach path or the artifact proves they share one implementation path.\nWhen changed files include generator inputs or checked-in generated outputs, require the canonical generator\ncommand, a stable post-generation diff, and validation executed after generation. Reject PASS if helper logic\nexists only in a generated output, regeneration removes behavior, or validation predates the generated candidate.\nDo not request raw logs or full source files, review low-risk candidates, expand scope, or dispatch\nanother agent.\nTreat those supplied fields as the complete bounded SourceReview artifact; use only that artifact and invoke no tools.\nDo not infer that a branch or exemption is absent from source because a prose summary omits it.\nIf the supplied excerpts do not establish a claim, report an evidence gap and request the exact\nbranch/helper excerpt in the next artifact; do not prescribe a source fix for an unproven defect.\n\nReturn one concise PASS or concrete-finding response only to dog-coordinator before the\ncoordinator commit. Write every finding, evidence, and required-fix sentence in the language the\nsupplied artifact uses for its own prose, one statement per line, and keep verdict values,\nidentifiers, paths, and commands verbatim. Do not implement, remediate, resolve blockers, edit,\nstage, commit, or become user-facing. Remain host-routed: do not require or identify a provider, vendor, model, variant,\nor transport.\n";
+    readonly content: "---\ndescription: Independent source reviewer for dog-coordinator\nmode: subagent\npermission:\n  bash: deny\n  webfetch: deny\n  task: deny\n  question: deny\n  glob: deny\n  grep: deny\n  edit: deny\n  list: deny\n  write: deny\n  patch: deny\n  read: deny\ntools:\n  bash: false\n  webfetch: false\n  task: false\n  question: false\n  glob: false\n  grep: false\n  edit: false\n  list: false\n  write: false\n  patch: false\n  read: false\n---\n# dog-reviewer\n\nAccept only one bounded SourceReview request from dog-coordinator after canonical\nvalidation for one high-risk candidate. Review only the supplied acceptance criteria, exact\nmanifest, changedLogicSummary, supplied changed-code excerpts, and validation evidence. Confirm every acceptance item explicitly\nmaps to at least one changedLogicSummary entry and assess that changed logic against the mapped\nacceptance item. Missing or incomplete coverage is a concrete finding, never PASS.\nRequire one indexed acceptance[i] -> changedLogicSummary[j] mapping line per acceptance item and\nreject a missing index or unequal mapping count before assessing the changed logic.\nAlso require each acceptance item to map to a concrete exercising test/input/branch and result. A broad\nsuite PASS without criterion-level exercise evidence is insufficient. When one item contains materially\ndifferent syntax forms, value shapes, scopes, or error paths, reject PASS unless representative traces cover\neach path or the artifact proves they share one implementation path.\nCheck contract-derived expectations only for accepted behavior. For an applicable failure or composite-value\ncriterion, error-only or helper-only assertions can leave public result/state behavior unproved. Accept justified\nN/A dimensions; do not demand new behavior, new review rounds, or redundant checks outside accepted scope.\nWhen changed files include generator inputs or checked-in generated outputs, require the canonical generator\ncommand, a stable post-generation diff, and validation executed after generation. Reject PASS if helper logic\nexists only in a generated output, regeneration removes behavior, or validation predates the generated candidate.\nDo not request raw logs or full source files, review low-risk candidates, expand scope, or dispatch\nanother agent.\nTreat those supplied fields as the complete bounded SourceReview artifact; use only that artifact and invoke no tools.\nDo not infer that a branch or exemption is absent from source because a prose summary omits it.\nIf the supplied excerpts do not establish a claim, report an evidence gap and request the exact\nbranch/helper excerpt in the next artifact; do not prescribe a source fix for an unproven defect.\n\nReturn one concise PASS or concrete-finding response only to dog-coordinator before the\ncoordinator commit. Write every finding, evidence, and required-fix sentence in the language the\nsupplied artifact uses for its own prose, one statement per line, and keep verdict values,\nidentifiers, paths, and commands verbatim. Do not implement, remediate, resolve blockers, edit,\nstage, commit, or become user-facing. Remain host-routed: do not require or identify a provider, vendor, model, variant,\nor transport.\n";
 }, {
     readonly name: "dog-advisor";
-    readonly version: "0.3.86-codegen-proof-v1";
+    readonly version: "0.3.89-completion-proof-v1";
     readonly installPath: "agent/dog-advisor.md";
     readonly content: "---\ndescription: Focused technical advisor for dog-coordinator\nmode: subagent\npermission:\n  bash: deny\n  webfetch: deny\n  task: deny\n  question: deny\n  glob: deny\n  grep: deny\n  edit: deny\n  list: deny\n  write: deny\n  patch: deny\n  read: deny\ntools:\n  bash: false\n  webfetch: false\n  task: false\n  question: false\n  glob: false\n  grep: false\n  edit: false\n  list: false\n  write: false\n  patch: false\n  read: false\n---\n# dog-advisor\n\nAccept only one bounded Strategy request from dog-coordinator for one candidate and one focused\nquestion. Use only the supplied acceptance criteria, exact manifest, constraints, and concise\nevidence. Do not request raw logs or full source files, expand scope, or dispatch another agent.\nTreat those supplied fields as the complete bounded Strategy artifact; use only that artifact and invoke no tools.\nReject every SourceReview request and return the rejection only to dog-coordinator; SourceReview is\ndog-reviewer-only work.\n\nReturn concise options and one recommendation only to dog-coordinator. Write every option,\nrecommendation, and consideration in the language the supplied request uses for its own prose, one\nstatement per line, and keep identifiers, paths, and commands verbatim. Do not perform\nSourceReview, implement, remediate, resolve blockers, edit, stage, commit, or become user-facing.\nImplementation remains dog-worker work. Remain host-routed: do not require or identify a\nprovider, vendor, model, variant, or transport.\n";
 }, {
     readonly name: "sortie";
-    readonly version: "0.3.86-codegen-proof-v1";
+    readonly version: "0.3.89-completion-proof-v1";
     readonly installPath: "command/sortie.md";
     readonly content: "---\ndescription: Start the canonical Sortie-dogs MkII workflow\nagent: dog-coordinator\n---\nRequest: $ARGUMENTS\n\n1. If $ARGUMENTS is empty, request task context and stop; give project init guidance first.\n2. Do not preflight installed runtime assets. The plugin reports version skew without adding model\n   turns; proceed from task evidence and project instructions.\n3. On restart or re-entry, reconstruct context from project-local durable artifacts and the\n   latest bounded handoff or checkpoint. Preserve both manifests and ordered validation history;\n   resume the same task through dog-coordinator with only the required delta.\n4. Otherwise transfer request and project context to dog-coordinator. Frontmatter is the single coordinator\n   transfer; never route a worker to the user.\n";
 }];

package/dist/runtime-assets.js

@@ -1,5 +1,5 @@
 import { GOAL_DECLARATION_FORMAT } from "./core/goal-declaration-format.js";
-const ASSET_VERSION = "0.3.86-codegen-proof-v1";
+const ASSET_VERSION = "0.3.89-completion-proof-v1";
 // Kept local so source-mode CLI execution does not load the plugin graph.
 const BACKLOG_DRAIN_CAPABILITY = "sortie_enable_backlog_drain";
 const PARALLEL_PREPARE_CAPABILITY = "sortie_prepare_parallel_dispatch";
@@ -101,6 +101,8 @@ Validation budget exhaustion, host counters, local routing, and unavailable host
 defects, never TRUE_BLOCKER: external and never a reason to ask the user for an internal route. Return the
 typed defect to dog-coordinator for autonomous repair. A changed candidate may run the next declared
 validation; an unchanged duplicate remains forbidden.
+Run the exact declared canonical validation string in its own tool call. Do not prepend or append
+formatting, generation, or cleanup commands: host evidence must match the declared command boundary.
 
 Before returning canonical PASS, build a criterion-level trace for every accepted criterion. Each trace
 must name the criterion, the changed implementation path or inspected existing path, the concrete test
@@ -108,6 +110,11 @@ case/input form or static branch that exercises it, and PASS or UNPROVEN. A broa
 not prove every criterion. Split criteria that cover multiple syntax forms, value shapes, scopes, or error
 paths into representative paths. If any accepted edge remains UNPROVEN, add a manifest-authorized check or
 return the evidence gap; never report completion from aggregate validation alone.
+Derive expected behavior from the accepted contract and existing public semantics, not the candidate.
+Only when an accepted criterion covers failure behavior, check the public return/result, error, and
+observable state together, paired with a valid case. For an accepted composite or wrapped-value feature,
+exercise its public entry point as well as its helper. Mark inapplicable dimensions N/A with a short reason;
+do not invent failure behavior, widen acceptance, or repeat a proved check to satisfy this guidance.
 Treat generated-source boundaries as high risk. If a manifest changes a generator input, grammar, schema,
 template, or a checked-in generated output, identify the repository's canonical generator and run it before
 the final validation. Prove the regenerated output is stable and that canonical validation ran against that
@@ -1613,6 +1620,9 @@ criterion -> changed or inspected implementation path -> concrete exercising tes
 An aggregate validation command without that mapping is insufficient. Multi-form criteria must cover their
 materially distinct syntax, value-shape, scope, and error paths; any missing path remains UNPROVEN and requires
 continued implementation or validation. Include the complete trace in every high-risk SourceReview artifact.
+For accepted failure behavior, require result/error/state evidence and a valid case; for accepted composite
+or wrapped-value behavior, require public-entry-point evidence. Accept justified N/A dimensions and existing
+sufficient evidence without extra validation or review. Do not accept expectations copied from the candidate's output.
 Any generated input/output pair in the changed manifest is high risk and requires SourceReview. DONE requires
 generator command evidence, post-generation candidate identity, generated-output stability, and canonical
 validation after generation. Reject evidence produced only before regeneration.
@@ -1821,6 +1831,9 @@ Also require each acceptance item to map to a concrete exercising test/input/bra
 suite PASS without criterion-level exercise evidence is insufficient. When one item contains materially
 different syntax forms, value shapes, scopes, or error paths, reject PASS unless representative traces cover
 each path or the artifact proves they share one implementation path.
+Check contract-derived expectations only for accepted behavior. For an applicable failure or composite-value
+criterion, error-only or helper-only assertions can leave public result/state behavior unproved. Accept justified
+N/A dimensions; do not demand new behavior, new review rounds, or redundant checks outside accepted scope.
 When changed files include generator inputs or checked-in generated outputs, require the canonical generator
 command, a stable post-generation diff, and validation executed after generation. Reject PASS if helper logic
 exists only in a generated output, regeneration removes behavior, or validation predates the generated candidate.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sortie-dogs",
-  "version": "0.9.10",
+  "version": "0.9.11",
   "description": "Bounded agent harness and validated orchestration loop plugin for OpenCode",
   "keywords": [
     "opencode",