tickmarkr 2.5.3 → 2.5.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -149,6 +149,27 @@ through brief lineage. **An executor choice nobody made is still an executor cho
149
149
  guidance belongs in the memory file or the shipped docs.
150
150
  4. Arm the watcher and your own supervision beat (Supervision). Report the hierarchy map (pane ids + names) to the user.
151
151
 
152
+ ### Restart, seat identity, and verified launch law
153
+
154
+ These rules apply after **ANY restart**, whether the overseer itself or Herdr restarted. First re-read the
155
+ overseer's own pane id from Herdr; never continue with an id remembered before the restart. Then re-announce
156
+ that fresh pane id to **every live seat** and re-arm **every watcher** with it, verifying each announcement and
157
+ arm by reading back the resulting pane/process state. A live seat must never keep a pre-restart overseer pane id.
158
+ When briefing a seat, take the overseer's address from the handoff file; never hardcode a pane id in a
159
+ brief or command template.
160
+
161
+ The orchestrator's run log, handoff, and plan live inside its sandbox root and are artifacts of that orchestrator.
162
+ The overseer reads them from there, using the path the orchestrator reports; do not substitute the
163
+ overseer's repository or a machine-global planning directory. The orchestrator brief must say: if the seat's
164
+ sandbox denies writes under `.git`, report the denial to the overseer and stop; the overseer launches the daemon itself;
165
+ and the daemon host is never sandboxed.
166
+
167
+ After every `agent start`, wait for and read the model banner. Only then deliver the brief with `pane run`,
168
+ then read the transcript back and verify that the brief's first words are present before any deadline is armed.
169
+ That read-back proves the brief was sent; a brief absent from the transcript was not sent. Every Claude
170
+ seat is started with `--effort high` and has its banner read. Inventories retain the **full suite log**, not a
171
+ tail or summary, and no one runs `git checkout` in a clone while that clone's suite is running.
172
+
152
173
  ### Seat-spawn and Leg-2 recipes
153
174
 
154
175
  Every mission to a Claude or Grok seat is delivered only with `herdr pane run <pane> "<message>"` and