voidmachine 5.0.3 → 5.0.5

package/dist/main.js

@@ -35768,6 +35768,7 @@ init_esm_shims();
 
 // ../mission-engine/dist/orchestration/review-loop.js
 init_esm_shims();
+var BOUNDED_REVIEW_BUDGET = { maxRounds: 3, maxCorrectionBatches: 2 };
 var SHA256 = /^sha256:[a-f0-9]{64}$/;
 function validNativeContextId(value) {
   return typeof value === "string" && value.trim().length > 0 && value.length <= 160 && [...value].every((char) => char.charCodeAt(0) >= 32 && (char.charCodeAt(0) < 127 || char.charCodeAt(0) > 159));
@@ -35953,7 +35954,7 @@ function collectCompletions(events, stage, expectedSource, stageStartSeqExclusiv
   }
   const validAccepted = accepted.filter((envelope) => !invalidRoundEvents.has(envelope.event.eventId) && !(contractMigration !== void 0 && stage === "post-implementation" && envelope.completion.specialistId === contractMigration.specialistId && envelope.event.seq < contractMigration.afterSeq));
   const highestRound = Math.max(historicalHighestRound, activeRound ?? 0);
-  const pendingFailureRounds = [...failedRoundBySpecialist.entries()].filter(([id3]) => !completedInWindow.has(id3)).map(([, round]) => round + 1);
+  const pendingFailureRounds = [...failedRoundBySpecialist.entries()].filter(([id3]) => !validAccepted.some((item) => item.completion.specialistId === id3)).map(([, round]) => round + 1);
   const nextRound = Math.max(firstCurrentRound, highestRound, ...pendingFailureRounds);
   return { accepted: [...retained, ...validAccepted], history, issues, highestRound, nextRound };
 }
@@ -36727,7 +36728,7 @@ function staleDispatchCompletions(events) {
 function specialistId2(value) {
   return /^core:[a-z0-9]+(?:-[a-z0-9]+)*$/.test(value);
 }
-function validProvenanceRecovery(input2, existing) {
+function validProvenanceRecovery(input2, existing, afterSeqExclusive = 0) {
   const disposition = input2.request.disposition;
   const observation2 = input2.observation;
   const bindings = observation2.reviewBindings;
@@ -36741,10 +36742,10 @@ function validProvenanceRecovery(input2, existing) {
   const observedSubject = observation2.reviewSubject;
   return bindings.every((binding3) => {
     const original = existing.find((item) => item.event.eventId === binding3.completionEventId);
-    if (original === void 0 || !disposition.completionEventIds.includes(binding3.completionEventId) || original.event.subject !== "core:independent-code-reviewer" || original.event.source !== observation2.expectedSource || original.completion.verdict !== "pass" || original.completion.findings.some((finding) => finding.classification !== "advisory") || original.completion.contractVersion !== observation2.contractVersions[original.event.subject] || field4(original.event, "inputHash") !== observation2.currentInputHashes[original.event.subject] || canonicalJsonHash(original.completion) !== binding3.completionHash || !sameReviewSubject(binding3.review, observedSubject) || binding3.review.taskId !== original.event.missionId || binding3.review.writerId !== writerId || binding3.review.provenance.kind !== "native-context" || binding3.review.provenance.contextId !== field4(original.event, "contextId"))
+    if (parseReviewReceipt(binding3.review) === void 0 || original === void 0 || original.event.seq <= afterSeqExclusive || !disposition.completionEventIds.includes(binding3.completionEventId) || original.event.subject !== "core:independent-code-reviewer" || original.event.source !== observation2.expectedSource || original.completion.verdict !== "pass" || original.completion.findings.some((finding) => finding.classification !== "advisory") || original.completion.contractVersion !== observation2.contractVersions[original.event.subject] || field4(original.event, "inputHash") !== observation2.currentInputHashes[original.event.subject] || canonicalJsonHash(original.completion) !== binding3.completionHash || !sameReviewSubject(binding3.review, observedSubject) || binding3.review.taskId !== original.event.missionId || binding3.review.writerId !== writerId || binding3.review.provenance.kind !== "native-context" || binding3.review.provenance.contextId !== field4(original.event, "contextId"))
       return false;
-    const requested = events.find((event) => event.seq < original.event.seq && matchesRequest(original.event, event) && field4(event, "contractVersion") === original.completion.contractVersion && `runtime:${String(field4(event, "runtime"))}` === observation2.expectedSource);
-    return requested !== void 0 && events.some((event) => event.kind === "specialist.started" && event.source === observation2.expectedSource && event.subject === original.event.subject && event.seq > requested.seq && event.seq < original.event.seq && ["stage", "reviewRound", "inputHash", "contextId"].every((key) => field4(event, key) === field4(original.event, key)));
+    const requested = events.find((event) => event.seq > afterSeqExclusive && event.seq < original.event.seq && matchesRequest(original.event, event) && field4(event, "contractVersion") === original.completion.contractVersion && `runtime:${String(field4(event, "runtime"))}` === observation2.expectedSource);
+    return requested !== void 0 && events.some((event) => event.kind === "specialist.started" && event.source === observation2.expectedSource && event.subject === original.event.subject && event.seq > requested.seq && event.seq < original.event.seq && ["stage", "reviewRound", "inputHash", "contractVersion", "contextId"].every((key) => field4(event, key) === field4(original.event, key)));
   });
 }
 function pendingPreparationClarification(input2, previousRecovery) {
@@ -36777,6 +36778,55 @@ function pendingPreparationClarification(input2, previousRecovery) {
   const completionEventIds = request.disposition.completionEventIds;
   return obligations.issues.length === 0 && obligations.obligations.some((item) => blocking.has(item.obligationId) && completionEventIds.includes(item.completionEventId));
 }
+function pendingStoppedEvidenceRequest(events, requestEventId, contextId) {
+  const lifecycle = projectMissionLifecycle(events);
+  if (lifecycle.status !== "closed" || lifecycle.closure.source !== "void-harness:mission.dispatch" || field4(lifecycle.closure, "reason") !== "controller-stop" || ambiguousEffects(events))
+    return false;
+  const request = events.find((event) => event.eventId === requestEventId);
+  const runtime2 = events[0] === void 0 ? void 0 : field4(events[0], "runtime");
+  if (runtime2 !== "codex" && runtime2 !== "claude" || events[0] === void 0 || field4(events[0], "runtimeAttested") !== true || !request || request.kind !== "specialist.evidence-discharge-requested" || request.source !== "void-harness:mission.dispatch" || request.seq >= lifecycle.closure.seq || field4(request, "nativeContextId") !== contextId || !validNativeContextId(contextId))
+    return false;
+  return events.some((event) => event.kind === "specialist.evidence-started" && event.source === `runtime:${String(runtime2)}` && event.subject === request.subject && event.causationId === request.eventId && event.seq > request.seq && event.seq < lifecycle.closure.seq && [
+    "completionEventId",
+    "completionHash",
+    "specialistId",
+    "nativeContextId",
+    "requestId"
+  ].every((key) => field4(event, key) === field4(request, key)));
+}
+function validEvidenceDispositionRecovery(input2) {
+  const { events } = input2.stream;
+  const { disposition } = input2.request;
+  if (disposition.kind !== "evidence-disposition" || disposition.responseEventIds.length < 1 || disposition.responseEventIds.length > 64 || new Set(disposition.responseEventIds).size !== disposition.responseEventIds.length)
+    return false;
+  const closure = events.find((event) => event.eventId === input2.request.closureEventId);
+  if (!closure)
+    return false;
+  const proofs = events.flatMap((event) => {
+    const parsed = event.kind === "evidence.recorded" ? parseEvidence(field4(event, "evidence")) : void 0;
+    return parsed?.ok ? [{ eventId: event.eventId, evidence: parsed.value }] : [];
+  });
+  const reduction = {
+    expectedSource: input2.observation.expectedSource,
+    phase: "completion",
+    evidenceContext: { missionId: closure.missionId, dependencies: input2.observation.evidenceDependencies ?? {} },
+    proofs
+  };
+  const before = reduceEvidenceObligations({ ...reduction, events: events.filter((event) => event.seq <= closure.seq) });
+  const after = reduceEvidenceObligations({ ...reduction, events });
+  if (before.issues.length > 0 || after.issues.length > 0)
+    return false;
+  return disposition.responseEventIds.every((id3) => {
+    const response = events.find((event) => event.eventId === id3);
+    if (response?.kind !== "specialist.evidence-discharged" || response.seq <= closure.seq || response.source !== input2.observation.expectedSource || !response.causationId || typeof field4(response, "nativeContextId") !== "string" || !pendingStoppedEvidenceRequest(events.filter((event) => event.seq < response.seq), response.causationId, String(field4(response, "nativeContextId"))))
+      return false;
+    const origin = completions(events).find((item) => item.event.eventId === field4(response, "completionEventId"));
+    if (!origin || origin.completion.contractVersion !== input2.observation.contractVersions[origin.event.subject])
+      return false;
+    const items = field4(response, "items");
+    return Array.isArray(items) && items.length > 0 && items.every((item) => record10(item) && Array.isArray(item["proofEventIds"]) && item["proofEventIds"].every((id4) => proofs.some((proof4) => proof4.eventId === id4 && proof4.evidence.dependencies.some((dependency) => dependency.key === "git:working-tree" && dependency.hash === input2.observation.evidenceDependencies?.["git:working-tree"]))) && before.obligations.some((value) => value.obligationId === item["obligationId"] && !value.discharged) && after.obligations.some((value) => value.obligationId === item["obligationId"] && value.discharged));
+  });
+}
 function admitStoppedMission(input2, projectedHistory = input2.stream.events) {
   const { stream: stream2, request, observation: observation2 } = input2;
   const events = stream2.events;
@@ -36795,11 +36845,14 @@ function admitStoppedMission(input2, projectedHistory = input2.stream.events) {
     return refuse2("stale-journal", "Re-observe the journal before requesting recovery");
   if (ambiguousEffects(events))
     return refuse2("ambiguous-effect", "Reconcile the unfinished external effect; recovery cannot replay it");
+  if (request.disposition.kind === "evidence-disposition" && !validEvidenceDispositionRecovery(input2)) {
+    return refuse2("invalid-evidence-disposition", "Complete a pending pre-stop author invocation with fresh canonical proofs; an old or unstarted response cannot reopen this episode");
+  }
+  const existing = completions(events).filter((item) => field4(item.event, "stage") === observation2.stage);
   const previousRecovery = events.filter((event) => event.kind === "mission.recovered").at(-1);
-  if (previousRecovery !== void 0 && !events.some((event) => event.seq > previousRecovery.seq && event.kind === "lead-writer.completed") && !pendingPreparationClarification(input2, previousRecovery)) {
+  if (previousRecovery !== void 0 && !events.some((event) => event.seq > previousRecovery.seq && event.kind === "lead-writer.completed") && !pendingPreparationClarification(input2, previousRecovery) && !validEvidenceDispositionRecovery(input2) && !validProvenanceRecovery(input2, existing, previousRecovery.seq)) {
     return refuse2("no-recovery-progress", "Record actual corrective progress before reopening another stopped episode");
   }
-  const existing = completions(events).filter((item) => field4(item.event, "stage") === observation2.stage);
   const disposition = request.disposition;
   const replacement = disposition.kind === "preparation-invocation";
   if (replacement && !preparationInvocationReplacement(input2)) {
@@ -36879,7 +36932,7 @@ function admitStoppedMission(input2, projectedHistory = input2.stream.events) {
     requiredSpecialists: required2,
     contractVersions: observation2.contractVersions,
     currentInputHashes: observation2.currentInputHashes,
-    maxRounds: observation2.maxRounds
+    ...observation2.reviewPolicy === "bounded-corrections-v1" ? BOUNDED_REVIEW_BUDGET : { maxRounds: observation2.maxRounds }
   };
   const originalReview = reduceReviewLoop({ ...reviewInput, events: projectedHistory });
   if (originalReview.issues.some((issue4) => replacement ? issue4.code !== "reused-context" || !inadmissible.includes(issue4.eventId) : issue4.code !== "wrong-review-round")) {
@@ -36893,7 +36946,7 @@ function admitStoppedMission(input2, projectedHistory = input2.stream.events) {
     return refuse2("incomplete-required-panel", "Every required preparation specialist must have its original matching PASS triplet before recovery");
   }
   const consumedRounds = Math.max(0, ...(replacement ? projectedHistory : projected).filter((event) => ["specialist.completed", "specialist.failed"].includes(event.kind) && field4(event, "stage") === observation2.stage).map((event) => Number(field4(event, "reviewRound"))));
-  if (!replacement && disposition.kind !== "review-provenance" && consumedRounds >= observation2.maxRounds)
+  if (!replacement && disposition.kind !== "review-provenance" && consumedRounds >= reviewInput.maxRounds)
     return refuse2("review-budget-exhausted", "The real review budget is exhausted; recovery cannot reset it");
   const consumedCorrectionBatches = projected.filter((event) => event.kind === "lead-writer.completed" && field4(event, "actionKind") === "run-correction").length;
   if (disposition.kind === "review-provenance" && consumedCorrectionBatches > 2) {
@@ -36915,12 +36968,12 @@ function admitStoppedMission(input2, projectedHistory = input2.stream.events) {
     inadmissibleCompletionEventIds: inadmissible,
     roundCorrections,
     consumedRounds,
-    remainingRounds: Math.max(0, observation2.maxRounds - consumedRounds),
+    remainingRounds: Math.max(0, reviewInput.maxRounds - consumedRounds),
     ...!replacement && disposition.kind !== "review-provenance" ? {} : {
       consumedCorrectionBatches,
       remainingCorrectionBatches: 2 - consumedCorrectionBatches
     },
-    nextAction: replacement || disposition.kind === "review-provenance" || disposition.kind === "command-correction" || disposition.kind === "controller-defect" && disposition.defect === "opaque-native-context" ? "verification" : disposition.kind === "review-blocker" ? "clarification" : "correction"
+    nextAction: replacement || disposition.kind === "evidence-disposition" || disposition.kind === "review-provenance" || disposition.kind === "command-correction" || disposition.kind === "controller-defect" && disposition.defect === "opaque-native-context" ? "verification" : disposition.kind === "review-blocker" ? "clarification" : "correction"
   };
   if (new TextEncoder().encode(canonicalJson(receipt2)).length > 16384) {
     return refuse2("recovery-receipt-too-large", "Narrow the recovery scope to the supported bounded incident");
@@ -36937,6 +36990,10 @@ function recoveryRequest(value) {
   if (value === void 0 || !record10(value) || !exactKeys2(value, ["schemaVersion", "closureEventId", "expectedJournalHash", "disposition"]) || value["schemaVersion"] !== 1 || typeof value["closureEventId"] !== "string" || typeof value["expectedJournalHash"] !== "string" || !/^sha256:[a-f0-9]{64}$/.test(value["expectedJournalHash"]) || value["disposition"] === void 0 || !record10(value["disposition"]))
     return false;
   const disposition = value["disposition"];
+  if (disposition["kind"] === "evidence-disposition") {
+    const ids = disposition["responseEventIds"];
+    return exactKeys2(disposition, ["kind", "responseEventIds"]) && Array.isArray(ids) && ids.length > 0 && ids.length <= 64 && new Set(ids).size === ids.length && ids.every((id3) => typeof id3 === "string" && /^evt_[A-Za-z0-9_-]{8,100}$/.test(id3));
+  }
   if (disposition["kind"] === "preparation-invocation") {
     return exactKeys2(disposition, ["kind", "completionEventIds"]) && Array.isArray(disposition["completionEventIds"]) && disposition["completionEventIds"].length > 0 && disposition["completionEventIds"].length <= 64 && disposition["completionEventIds"].every((item) => typeof item === "string" && /^evt_[A-Za-z0-9_-]{8,100}$/.test(item)) && new Set(disposition["completionEventIds"]).size === disposition["completionEventIds"].length;
   }
@@ -36960,11 +37017,12 @@ function recoveryObservation(value) {
     "currentInputHashes",
     "maxRounds",
     "expectedSource",
+    ...value["reviewPolicy"] === void 0 ? [] : ["reviewPolicy"],
     ...value["resolutionArtifact"] === void 0 ? [] : ["resolutionArtifact"],
     ...value["reviewSubject"] === void 0 ? [] : ["reviewSubject"],
     ...value["reviewBindings"] === void 0 ? [] : ["reviewBindings"],
     ...value["evidenceDependencies"] === void 0 ? [] : ["evidenceDependencies"]
-  ]) || !["pre-implementation", "post-implementation"].includes(String(value["stage"])) || !["runtime:codex", "runtime:claude"].includes(String(value["expectedSource"])) || typeof value["maxRounds"] !== "number" || !Number.isSafeInteger(value["maxRounds"]) || value["maxRounds"] < 1 || value["maxRounds"] > 8 || value["contractVersions"] === void 0 || !record10(value["contractVersions"]) || value["currentInputHashes"] === void 0 || !record10(value["currentInputHashes"]))
+  ]) || value["reviewPolicy"] !== void 0 && value["reviewPolicy"] !== "bounded-corrections-v1" || !["pre-implementation", "post-implementation"].includes(String(value["stage"])) || !["runtime:codex", "runtime:claude"].includes(String(value["expectedSource"])) || typeof value["maxRounds"] !== "number" || !Number.isSafeInteger(value["maxRounds"]) || value["maxRounds"] < 1 || value["maxRounds"] > 8 || value["contractVersions"] === void 0 || !record10(value["contractVersions"]) || value["currentInputHashes"] === void 0 || !record10(value["currentInputHashes"]))
     return false;
   return Object.keys(value["contractVersions"]).length <= 64 && Object.keys(value["currentInputHashes"]).length <= 64 && Object.entries(value["contractVersions"]).every(([key, version3]) => specialistId2(key) && typeof version3 === "number" && Number.isSafeInteger(version3) && version3 >= 1 && version3 <= 1e4) && Object.entries(value["currentInputHashes"]).every(([key, hash7]) => specialistId2(key) && typeof hash7 === "string" && /^sha256:[a-f0-9]{64}$/.test(hash7)) && (value["reviewSubject"] === void 0 || isReviewSubject(value["reviewSubject"])) && (value["reviewBindings"] === void 0 || Array.isArray(value["reviewBindings"]) && value["reviewBindings"].length <= 64 && value["reviewBindings"].every(reviewBinding)) && (value["resolutionArtifact"] === void 0 || artifact(value["resolutionArtifact"])) && (value["evidenceDependencies"] === void 0 || record10(value["evidenceDependencies"]) && Object.keys(value["evidenceDependencies"]).length <= 64 && Object.entries(value["evidenceDependencies"]).every(([key, hash7]) => key.length > 0 && key.length <= 500 && typeof hash7 === "string" && /^sha256:[a-f0-9]{64}$/.test(hash7)));
 }
@@ -38880,7 +38938,7 @@ function evidenceObligations(input2, expectedSource, phase) {
     evidenceContext: input2.evidenceContext
   });
 }
-function obligationStop(state, review, verdict, preparation = false) {
+function obligationStop(state, review, verdict) {
   if (state.issues.length > 0) {
     return stopped("degraded", review, verdict, state.issues.map((issue4) => `Evidence obligation ${issue4.eventId}: ${issue4.detail}`), "Resolve the invalid specialist evidence disposition, then classify or discharge the original obligation through its authorized specialist.");
   }
@@ -38888,7 +38946,7 @@ function obligationStop(state, review, verdict, preparation = false) {
   if (blocking.size === 0)
     return void 0;
   const decision = stopped("blocked", review, verdict, state.obligations.filter((item) => blocking.has(item.obligationId)).map((item) => `Evidence obligation ${item.obligationId} (${item.due}): ${item.requestText}`), "Use mission evidence-request, then record the authorized author response with mission evidence-event to classify or discharge the obligation; a writer completion does not replace the required proof.");
-  return preparation ? { ...decision, action: { kind: "await-evidence", reasons: decision.reasons } } : decision;
+  return { ...decision, action: { kind: "await-evidence", reasons: decision.reasons } };
 }
 function orchestrateMissionTeam(originalInput) {
   const migrated = validatedSpecialistContractMigrations(originalInput.stream.events, originalInput.plan);
@@ -38984,7 +39042,10 @@ function orchestrateMissionTeam(originalInput) {
   if (preparationRecovery?.replacement && firstImplementationSeq === void 0 && requiredSpecialists(input2.plan, "pre-implementation").some((id3) => input2.currentInputHashesByStage["pre-implementation"][id3] !== preparationRecovery.inputHashes[id3] || contractVersions(input2.plan)[id3] !== preparationRecovery.contractVersions[id3])) {
     return stopped("blocked", preReview, baseVerdict, ["Preparation replacement inputs or contracts changed; reconcile the admitted subject before dispatch"]);
   }
-  const pendingEvidence = obligationStop(obligations, preReview, baseVerdict, firstImplementationSeq === void 0);
+  if (firstImplementationSeq !== void 0 && input2.stream.events.some((event) => event.kind === "specialist.completed" && event.seq > firstImplementationSeq && lifecycleField(event, "stage") === "pre-implementation")) {
+    return stopped("blocked", preReview, baseVerdict, ["pre-implementation review was replayed after implementation"]);
+  }
+  const pendingEvidence = obligationStop(obligations, preReview, baseVerdict);
   const migration = migrated.migration;
   if (migration !== void 0) {
     const receipt2 = migration.receipt;
@@ -39010,6 +39071,33 @@ function orchestrateMissionTeam(originalInput) {
       }, input2.specialistRuntime);
     }
   }
+  const postReview = firstImplementationSeq === void 0 || lastWriterSeq === void 0 ? void 0 : reduceReviewLoop({
+    stage: "post-implementation",
+    expectedSource,
+    stageStartSeqExclusive: firstImplementationSeq,
+    afterSeqExclusive: lastWriterSeq,
+    events: reviewEvents,
+    requiredSpecialists: requiredSpecialists(input2.plan, "post-implementation", start.boundedReview),
+    contractVersions: contractVersions(input2.plan),
+    currentInputHashes: input2.currentInputHashesByStage["post-implementation"],
+    ...start.boundedReview ? BOUNDED_REVIEW_BUDGET : { maxRounds: input2.maxReviewRounds },
+    // Pending proofs are handled by obligationStop; they must not mask failed reviews.
+    evidenceObligations: { ...obligations, blockingObligationIds: [] },
+    validProofIds: input2.stream.events.flatMap((event) => {
+      if (event.kind !== "evidence.recorded")
+        return [];
+      const parsed = parseEvidence(lifecycleField(event, "evidence"));
+      return parsed.ok && parsed.value.evidenceId === event.subject && parsed.value.missionId === event.missionId && parsed.value.status === "passed" && assessEvidence(parsed.value, input2.evidenceContext).status === "fresh" ? [parsed.value.evidenceId] : [];
+    }),
+    ...migration === void 0 ? {} : { contractMigration: {
+      specialistId: migration.receipt.specialistId,
+      afterSeq: migration.seq,
+      reviewRound: migration.receipt.reviewRound
+    } }
+  });
+  if (postReview?.status === "blocked" || postReview?.status === "degraded") {
+    return applyRuntimeCertification(decideReviewPhase(start, postReview, baseVerdict, "post-implementation"), input2.specialistRuntime);
+  }
   const correctiveFindingIds = pendingRecoveredCorrectionFindingIds(input2.stream.events);
   const correctiveContinuation = pendingEvidence !== void 0 && obligations.issues.length === 0 && firstImplementationSeq !== void 0 && correctiveFindingIds.length > 0;
   if (pendingEvidence !== void 0 && !correctiveContinuation) {
@@ -39058,33 +39146,9 @@ function orchestrateMissionTeam(originalInput) {
       reasons
     }, input2.specialistRuntime);
   }
-  if (firstWriterSeq === void 0 || firstImplementationSeq === void 0 || lastWriterSeq === void 0) {
+  if (firstWriterSeq === void 0 || firstImplementationSeq === void 0 || lastWriterSeq === void 0 || postReview === void 0) {
     throw new Error("MISSION_TEAM_INVARIANT: writer completion boundary is missing");
   }
-  const postReview = reduceReviewLoop({
-    stage: "post-implementation",
-    expectedSource,
-    stageStartSeqExclusive: firstImplementationSeq,
-    afterSeqExclusive: lastWriterSeq,
-    events: reviewEvents,
-    requiredSpecialists: requiredSpecialists(input2.plan, "post-implementation", start.boundedReview),
-    contractVersions: contractVersions(input2.plan),
-    currentInputHashes: input2.currentInputHashesByStage["post-implementation"],
-    maxRounds: start.boundedReview ? 3 : input2.maxReviewRounds,
-    ...start.boundedReview ? { maxCorrectionBatches: 2 } : {},
-    evidenceObligations: obligations,
-    validProofIds: input2.stream.events.flatMap((event) => {
-      if (event.kind !== "evidence.recorded")
-        return [];
-      const parsed = parseEvidence(lifecycleField(event, "evidence"));
-      return parsed.ok && parsed.value.evidenceId === event.subject && parsed.value.missionId === event.missionId && parsed.value.status === "passed" && assessEvidence(parsed.value, input2.evidenceContext).status === "fresh" ? [parsed.value.evidenceId] : [];
-    }),
-    ...migration === void 0 ? {} : { contractMigration: {
-      specialistId: migration.receipt.specialistId,
-      afterSeq: migration.seq,
-      reviewRound: migration.receipt.reviewRound
-    } }
-  });
   if (start.boundedReview && postReview.missingSpecialists.length === 0) {
     const receiptReasons = boundedReceiptReasons(input2, start, reviewEvents);
     if (receiptReasons.length > 0)
@@ -46578,7 +46642,7 @@ function dependencyEntries(pkg) {
 function technology(id3, version3, source2) {
   return Object.freeze({ id: id3, version: version3, sources: Object.freeze([source2]) });
 }
-function packageTechnologies(workspace) {
+function packageTechnologies(workspace, recipe) {
   const technologies = /* @__PURE__ */ new Map();
   const source2 = workspace.path === "." ? "package.json" : `${workspace.path}/package.json`;
   for (const [dependency, version3] of dependencyEntries(workspace.packageJson)) {
@@ -46591,7 +46655,10 @@ function packageTechnologies(workspace) {
     }
   }
   if (workspace.path === ".") {
-    technologies.set("node", technology("node", exactVersion(process.versions.node), "runtime:node"));
+    const declaredNode2 = workspace.packageJson.engines?.node;
+    const projectNode = typeof declaredNode2 === "string" && /^\d+\.\d+\.\d+$/.test(declaredNode2) ? declaredNode2 : null;
+    const projectNodeSource = projectNode === null && typeof declaredNode2 === "string" ? `package.json:engines.node:${declaredNode2}` : "package.json:engines.node";
+    technologies.set("node", recipe === "runtime-v1" ? technology("node", exactVersion(process.versions.node), "runtime:node") : technology("node", projectNode, projectNodeSource));
     const packageManager = workspace.packageJson.packageManager;
     if (packageManager !== void 0) {
       const separator = packageManager.indexOf("@");
@@ -46617,7 +46684,7 @@ function packageTechnologies(workspace) {
 function validChangedFile(file2) {
   return file2.length > 0 && !file2.startsWith("/") && !file2.startsWith("../") && !file2.includes("/../") && !file2.includes("\\") && posix.normalize(file2) === file2;
 }
-function detectProfileInput(root, files) {
+function detectProfileInput(root, files, recipe = "runtime-v1") {
   if (!files.every(validChangedFile)) {
     throw new Error("PROFILE_INPUT_INVALID: changed files must remain inside the project root");
   }
@@ -46625,7 +46692,7 @@ function detectProfileInput(root, files) {
   const rootWorkspace = workspaces.find((workspace) => workspace.path === ".");
   const projects2 = workspaces.map((workspace) => Object.freeze({
     path: workspace.path,
-    technologies: packageTechnologies(workspace)
+    technologies: packageTechnologies(workspace, recipe)
   }));
   if (projects2.length > 1) {
     const rootProject = projects2.find((project) => project.path === ".");
@@ -55863,17 +55930,18 @@ async function createMission(root, input2) {
   );
   await writeMissionMetadata(run2, safeInput, createdAt);
 }
-async function writeMissionControllerPlan(root, missionId, plan2, ticket, baseCommit) {
+async function writeMissionControllerPlan(root, missionId, plan2, ticket, baseCommit, inputRecipe) {
   const run2 = await existingRunDirectory(root, missionId);
-  const routingHash = missionControllerRoutingHash(plan2, ticket, baseCommit);
+  const routingHash = missionControllerRoutingHash(plan2, ticket, baseCommit, inputRecipe);
   const handle3 = await open$1(join(run2, "controller-plan.json"), "wx", 384);
   try {
     await handle3.writeFile(`${JSON.stringify({
-      schemaVersion: baseCommit === void 0 ? 1 : 2,
+      schemaVersion: inputRecipe === void 0 ? baseCommit === void 0 ? 1 : 2 : 3,
       routingHash,
       plan: plan2,
       ticket,
-      ...baseCommit === void 0 ? {} : { baseCommit }
+      ...baseCommit === void 0 ? {} : { baseCommit },
+      ...inputRecipe === void 0 ? {} : { inputRecipe }
     })}
 `, "utf8");
   } finally {
@@ -55902,28 +55970,38 @@ async function loadMissionControllerPlan(root, missionId) {
     "routingHash",
     "plan",
     "ticket",
-    ...parsed.schemaVersion === 2 ? ["baseCommit"] : []
+    ...parsed.schemaVersion === 2 || parsed.schemaVersion === 3 ? ["baseCommit"] : [],
+    ...parsed.schemaVersion === 3 ? ["inputRecipe"] : []
   ])) {
     throw new Error("MISSION_CONTROLLER_PLAN_INVALID: plan envelope is malformed");
   }
   const plan2 = parseMissionSpecialistPlan(parsed.plan);
   const ticket = parseMissionControllerTicket(parsed.ticket);
   const routingHash = typeof parsed.routingHash === "string" ? parsed.routingHash : "";
-  const baseCommit = parsed.schemaVersion === 2 ? parsed.baseCommit : void 0;
-  if (parsed.schemaVersion !== 1 && parsed.schemaVersion !== 2 || parsed.schemaVersion === 2 && (typeof baseCommit !== "string" || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(baseCommit)) || !/^sha256:[a-f0-9]{64}$/.test(routingHash)) {
+  const baseCommit = parsed.schemaVersion === 2 || parsed.schemaVersion === 3 ? parsed.baseCommit : void 0;
+  const inputRecipe = parsed.schemaVersion === 3 && parsed.inputRecipe === "project-v1" ? "project-v1" : void 0;
+  if (parsed.schemaVersion !== 1 && parsed.schemaVersion !== 2 && parsed.schemaVersion !== 3 || parsed.schemaVersion === 3 && inputRecipe === void 0 || (parsed.schemaVersion === 2 || parsed.schemaVersion === 3) && (typeof baseCommit !== "string" || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(baseCommit)) || !/^sha256:[a-f0-9]{64}$/.test(routingHash)) {
     throw new Error("MISSION_CONTROLLER_PLAN_INVALID: plan integrity check failed");
   }
   const base = typeof baseCommit === "string" ? { baseCommit } : {};
-  if (missionControllerRoutingHash(plan2, ticket, base.baseCommit) !== routingHash) {
+  if (missionControllerRoutingHash(plan2, ticket, base.baseCommit, inputRecipe) !== routingHash) {
     throw new Error("MISSION_CONTROLLER_PLAN_INVALID: plan integrity check failed");
   }
-  return Object.freeze({ plan: plan2, ticket, routingHash, ...base });
+  return Object.freeze({ plan: plan2, ticket, routingHash, ...base, ...inputRecipe === void 0 ? {} : { inputRecipe } });
 }
-function missionControllerRoutingHash(plan2, ticket, baseCommit) {
+function missionControllerRoutingHash(plan2, ticket, baseCommit, inputRecipe) {
+  if (inputRecipe !== void 0 && (inputRecipe !== "project-v1" || baseCommit === void 0)) {
+    throw new Error("MISSION_CONTROLLER_PLAN_INVALID: project input recipe requires a committed baseline");
+  }
   if (baseCommit !== void 0 && !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(baseCommit)) {
     throw new Error("MISSION_REVIEW_BASE_INVALID: expected a full commit object ID");
   }
-  return canonicalJsonHash({ plan: plan2, ticket, ...baseCommit === void 0 ? {} : { baseCommit } });
+  return canonicalJsonHash({
+    plan: plan2,
+    ticket,
+    ...baseCommit === void 0 ? {} : { baseCommit },
+    ...inputRecipe === void 0 ? {} : { inputRecipe }
+  });
 }
 function unknownRecord2(value) {
   return typeof value === "object" && Boolean(value) && !Array.isArray(value);
@@ -56335,6 +56413,7 @@ async function loadProfiles(root, coreProfileDirectory) {
 // src/lib/mission-inputs.ts
 var execFile2 = promisify(execFile);
 var MAX_TICKET_BYTES = 1e5;
+var MAX_REVIEW_PATCH_BYTES = 16e6;
 async function readTicket(root, ticketPath) {
   const canonicalRoot = await realpath(resolve(root));
   const loaded = await readBoundedProjectFile({
@@ -56390,7 +56469,7 @@ async function missionReviewBase(root) {
     throw new Error("MISSION_REVIEW_BASE_INVALID: a committed Git baseline is required");
   }
 }
-async function captureMissionReviewSubject(root, baseCommit, committed = false) {
+async function captureMissionReviewSubject(root, baseCommit, committed = false, hashFormat = committed ? "committed" : "legacy") {
   if (baseCommit === void 0) {
     throw new Error(
       "MISSION_REVIEW_BASE_MISSING: legacy mission has no review baseline; preserve its history and start a new mission"
@@ -56430,7 +56509,17 @@ async function captureMissionReviewSubject(root, baseCommit, committed = false)
         "--relative",
         ...range,
         ...paths
-      ], options2),
+      ], {
+        ...options2,
+        maxBuffer: MAX_REVIEW_PATCH_BYTES
+      }).catch((error62) => {
+        if (error62 instanceof Error && "code" in error62 && error62.code === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") {
+          throw new Error(
+            `MISSION_REVIEW_PATCH_TOO_LARGE: Git review patch exceeds ${MAX_REVIEW_PATCH_BYTES} bytes`
+          );
+        }
+        throw error62;
+      }),
       execFile2("git", [
         "diff",
         "--no-ext-diff",
@@ -56463,7 +56552,7 @@ async function captureMissionReviewSubject(root, baseCommit, committed = false)
       files,
       hash: canonicalJsonHash({
         baseCommit,
-        ...reviewedCommit === void 0 ? {} : { reviewedCommit },
+        ...hashFormat === "legacy" ? {} : { reviewedCommit },
         diff: patch.stdout,
         files: files.files
       })
@@ -56537,10 +56626,10 @@ function detectedStack(root, profileInput) {
     status: "known"
   });
 }
-async function planMission(root, ticketPath, generatedAt = (/* @__PURE__ */ new Date()).toISOString()) {
-  return (await planBoundMission(root, ticketPath, generatedAt)).plan;
+async function planMission(root, ticketPath, generatedAt = (/* @__PURE__ */ new Date()).toISOString(), inputRecipe = "runtime-v1") {
+  return (await planBoundMission(root, ticketPath, generatedAt, void 0, void 0, inputRecipe)).plan;
 }
-async function compileMission(root, ticket, generatedAt, detectedFiles, specialistCatalog) {
+async function compileMission(root, ticket, generatedAt, detectedFiles, specialistCatalog, inputRecipe = "runtime-v1") {
   const [coreRoot, diff] = await Promise.all([
     findCoreSource(),
     detectedFiles ?? gitFiles(root)
@@ -56550,7 +56639,7 @@ async function compileMission(root, ticket, generatedAt, detectedFiles, speciali
     loadProfiles(root, join(coreRoot, "profiles")),
     specialistCatalog ?? loadSpecialists(coreRoot)
   ]);
-  const profileInput = detectProfileInput(root, diff.files);
+  const profileInput = detectProfileInput(root, diff.files, inputRecipe);
   const stack = detectedStack(root, profileInput);
   return compileMissionPlan({
     ticket: { id: ticket.id, title: ticket.title, body: ticket.body },
@@ -56570,9 +56659,9 @@ function controllerTicketBinding(ticket) {
     contentHash: `sha256:${createHash("sha256").update(ticket.body).digest("hex")}`
   });
 }
-async function planBoundMission(root, ticketPath, generatedAt = (/* @__PURE__ */ new Date()).toISOString(), detectedFiles, specialistCatalog) {
+async function planBoundMission(root, ticketPath, generatedAt = (/* @__PURE__ */ new Date()).toISOString(), detectedFiles, specialistCatalog, inputRecipe = "runtime-v1") {
   const ticket = await readTicket(root, ticketPath);
-  const plan2 = await compileMission(root, ticket, generatedAt, detectedFiles, specialistCatalog);
+  const plan2 = await compileMission(root, ticket, generatedAt, detectedFiles, specialistCatalog, inputRecipe);
   return Object.freeze({
     plan: plan2,
     ticket: controllerTicketBinding(ticket)
@@ -67137,6 +67226,11 @@ function parseMissionRecoveryRequest(value) {
     if (!exact2(disposition, ["kind", "defect"]) || defect !== "partial-fanout-round" && defect !== "stale-input-dispatch" && defect !== "opaque-native-context") invalid11();
     return { ...base, disposition: { kind: "controller-defect", defect } };
   }
+  if (disposition["kind"] === "evidence-disposition") {
+    const ids2 = disposition["responseEventIds"];
+    if (!exact2(disposition, ["kind", "responseEventIds"]) || !Array.isArray(ids2) || ids2.length < 1 || ids2.length > 64 || !ids2.every(eventId) || new Set(ids2).size !== ids2.length) invalid11();
+    return { ...base, disposition: { kind: "evidence-disposition", responseEventIds: ids2 } };
+  }
   const commandCorrection = disposition["kind"] === "command-correction";
   const ids = disposition["completionEventIds"];
   if (disposition["kind"] === "preparation-invocation") {
@@ -67418,13 +67512,22 @@ async function validateCompletion(events, candidate, roots, expectedSource) {
   if (discharge2) {
     const items = field7(candidate.payload, "items");
     if (!Array.isArray(items) || items.some((item) => !record25(item) || !state.obligations.some((value) => value.obligationId === item["obligationId"] && value.discharged))) {
-      invalid13("requested obligations need fresh successful canonical proofs");
+      invalid13(`requested obligations need fresh successful canonical proofs; observed git:working-tree ${dependencies["git:working-tree"]} at ${roots.workRoot}; run from the proof worktree and inspect its commit/diff binding`);
     }
   }
 }
-async function recordSpecialistEvidence(roots, missionId, status3, input2) {
-  const events = (await inspectMission(roots.installRoot, missionId, { dependencies: {} })).stream.events;
+function requireResponseAdmission(events, status3, input2) {
+  if (observedMissionLifecycle(events).status === "open") return;
+  if (status3 === "completed" && pendingStoppedEvidenceRequest(events, input2.requestEventId, input2.contextId)) return;
   requireOpenMission(events);
+}
+async function recordSpecialistEvidence(roots, missionId, status3, input2) {
+  const { stream: stream2 } = await inspectMission(roots.installRoot, missionId, { dependencies: {} });
+  if (stream2.continuity !== "complete" || stream2.invalidLines > 0 || stream2.duplicateEventIds > 0) {
+    invalid13("complete unaltered journal is required before author response admission");
+  }
+  const events = stream2.events;
+  requireResponseAdmission(events, status3, input2);
   const source2 = identity(events);
   const request = exactRequest(events, input2);
   const kind2 = status3 === "started" ? "specialist.evidence-started" : request.kind === "specialist.evidence-classification-requested" ? "specialist.evidence-classified" : "specialist.evidence-discharged";
@@ -67448,7 +67551,7 @@ async function recordSpecialistEvidence(roots, missionId, status3, input2) {
     eventId: id3,
     draft,
     validate: async (current) => {
-      requireOpenMission(current);
+      requireResponseAdmission(current, status3, input2);
       exactRequest(current, input2);
       if (status3 === "completed") {
         const started = current.find((event) => event.kind === "specialist.evidence-started" && event.source === source2 && event.subject === request.subject && event.causationId === request.eventId && field7(event.payload, "nativeContextId") === input2.contextId);
@@ -67489,6 +67592,9 @@ function parseSpecialistEvidenceRequest(value) {
   return { ...base, operation: "discharge", obligationIds: ids };
 }
 function responseItem(value) {
+  if (record25(value) && typeof value["reason"] === "string" && value["reason"].length > 1e3) {
+    invalid13(`reason has ${value["reason"].length} characters; maximum is 1000; request a corrected author response`);
+  }
   if (!record25(value) || !text5(value["reason"])) invalid13("an author reason is required for each disposition");
   if ("requestIndex" in value) {
     const due2 = value["due"];
@@ -67920,7 +68026,7 @@ async function recordSpecialistRequests(root, missionId, envelopes, planHash) {
 init_esm_shims();
 
 // package.json
-var version2 = "5.0.3";
+var version2 = "5.0.5";
 
 // src/lib/runs/verify.ts
 var MAX_CAPTURE_BYTES = 64 * 1024;
@@ -68430,8 +68536,8 @@ async function migrateMissionSpecialist(roots, missionId, request) {
     throw new Error(`SPECIALIST_CONTRACT_MIGRATION_NATIVE: ${capability.limitations.join("; ")}`);
   }
   const assets = await observeSpecialistMigrationAssets(coreRoot, installRoot, identity2.runtime);
-  const subject = await captureMissionReviewSubject(workRoot, stored.baseCommit);
-  const live = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject.files);
+  const subject = await captureControllerReviewSubject(workRoot, stored.baseCommit, current.inspected.stream.events);
+  const live = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject.files, void 0, stored.inputRecipe);
   if (live.ticket.path !== stored.ticket.path || live.ticket.contentHash !== stored.ticket.contentHash) {
     throw new Error("MISSION_TICKET_CHANGED: migration cannot replace the bound ticket");
   }
@@ -68440,7 +68546,7 @@ async function migrateMissionSpecialist(roots, missionId, request) {
     canonicalJsonHash({ routing: specialist.proof.inputHash, subject: subject.hash })
   ]));
   const comparisonCatalog = await loadSpecialistMigrationComparisonCatalog(coreRoot, assets.declaration, stored.plan);
-  const comparison = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject.files, comparisonCatalog);
+  const comparison = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject.files, comparisonCatalog, stored.inputRecipe);
   const originalHashes = Object.fromEntries(comparison.plan.specialists.map((specialist) => [
     specialist.specialistId,
     canonicalJsonHash({ routing: specialist.proof.inputHash, subject: subject.hash })
@@ -68465,6 +68571,18 @@ async function migrateMissionSpecialist(roots, missionId, request) {
     nativeAgentSha256: assets.nativeAgentSha256
   } };
 }
+function boundedMissionReview(events) {
+  return events.some((event) => event.kind === "mission.started" && objectField(event.payload, "reviewPolicy") === "bounded-corrections-v1") || events.some((event) => event.kind === "mission.recovered" && objectField(objectField(objectField(event.payload, "request"), "disposition"), "kind") === "review-provenance");
+}
+function captureControllerReviewSubject(root, baseCommit, events, requireCommitted = false) {
+  const committedFormat = events.some((event) => event.kind === "mission.started" && objectField(event.payload, "reviewPolicy") === "bounded-corrections-v1");
+  return captureMissionReviewSubject(
+    root,
+    baseCommit,
+    requireCommitted || boundedMissionReview(events),
+    committedFormat ? "committed" : "legacy"
+  );
+}
 async function recoverStoppedMission(roots, missionId, request) {
   const { workRoot, installRoot } = roots;
   const [stored, current, coreRoot] = await Promise.all([
@@ -68496,8 +68614,13 @@ async function recoverStoppedMission(roots, missionId, request) {
     }
   }
   const implemented = inspected.stream.events.some((event) => event.kind === "lead-writer.completed" && objectField(event.payload, "actionKind") !== "run-preparation-correction");
-  const subject = implemented ? await captureMissionReviewSubject(workRoot, stored.baseCommit) : void 0;
-  const live = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject?.files);
+  const subject = implemented ? await captureControllerReviewSubject(
+    workRoot,
+    stored.baseCommit,
+    inspected.stream.events,
+    provenanceRecovery
+  ) : void 0;
+  const live = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject?.files, void 0, stored.inputRecipe);
   if (live.ticket.path !== stored.ticket.path || live.ticket.contentHash !== stored.ticket.contentHash) {
     throw new Error("MISSION_TICKET_CHANGED: recovery cannot replace the original ticket");
   }
@@ -68514,7 +68637,7 @@ async function recoverStoppedMission(roots, missionId, request) {
       throw new Error("SPECIALIST_CONTRACT_MIGRATION_INVALID: declared or installed contract changed");
     }
     const comparisonCatalog = await loadSpecialistMigrationComparisonCatalog(coreRoot, assets.declaration, stored.plan);
-    const comparison = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject.files, comparisonCatalog);
+    const comparison = await planBoundMission(workRoot, stored.ticket.path, (/* @__PURE__ */ new Date()).toISOString(), subject.files, comparisonCatalog, stored.inputRecipe);
     for (const specialist of comparison.plan.specialists) {
       if (specialist.specialistId !== assets.declaration.specialistId) {
         currentInputHashes[specialist.specialistId] = canonicalJsonHash({
@@ -68526,19 +68649,19 @@ async function recoverStoppedMission(roots, missionId, request) {
   }
   const provenance4 = request.disposition.kind !== "review-provenance" ? void 0 : await readRecoveryReviewBindings(workRoot, request.disposition.resolutionArtifact.path);
   const resolutionArtifact = provenance4?.artifact ?? (request.disposition.kind === "review-blocker" || request.disposition.kind === "command-correction" ? await recoveryResolutionArtifact(workRoot, request.disposition.resolutionArtifact.path) : void 0);
-  const committedSubject = provenance4 === void 0 ? void 0 : await captureMissionReviewSubject(workRoot, stored.baseCommit, true);
   const opaqueContextRecovery = request.disposition.kind === "controller-defect" && request.disposition.defect === "opaque-native-context";
   const recoverySpecialists = opaqueContextRecovery || request.disposition.kind === "preparation-invocation" ? migration.plan.specialists.filter((value) => value.state === "applicable" && value.stages?.includes("pre-implementation")) : migration.plan.specialists;
   const observation2 = {
-    ...provenance4 === void 0 || committedSubject?.baseCommit === void 0 || committedSubject.reviewedCommit === void 0 ? {} : {
+    ...provenance4 === void 0 || subject?.baseCommit === void 0 || subject.reviewedCommit === void 0 ? {} : {
       reviewBindings: provenance4.bindings,
       reviewSubject: {
         taskId: missionId,
-        baseCommit: committedSubject.baseCommit,
-        reviewedCommit: committedSubject.reviewedCommit,
+        baseCommit: subject.baseCommit,
+        reviewedCommit: subject.reviewedCommit,
         acceptanceCriteriaHash: stored.ticket.contentHash
       }
     },
+    ...implemented && (provenanceRecovery || boundedMissionReview(inspected.stream.events)) ? { reviewPolicy: "bounded-corrections-v1" } : {},
     stage: implemented ? "post-implementation" : "pre-implementation",
     maxRounds: 2,
     evidenceDependencies: { "git:working-tree": current.project.diffHash },
@@ -68602,13 +68725,14 @@ async function dispatchMissionSpecialists(roots, input2, generatedAt = (/* @__PU
   const inspected = current?.inspected ?? initialInspection;
   requireOpenMission(inspected.stream.events);
   const implemented = inspected.stream.events.some((event) => event.kind === "lead-writer.completed" && isUnknownRecord(event.payload) && event.payload.actionKind !== "run-preparation-correction");
-  const boundedReview = inspected.stream.events.some((event) => event.kind === "mission.started" && objectField(event.payload, "reviewPolicy") === "bounded-corrections-v1") || inspected.stream.events.some((event) => event.kind === "mission.recovered" && objectField(objectField(objectField(event.payload, "request"), "disposition"), "kind") === "review-provenance");
-  const reviewSubject = implemented ? await captureMissionReviewSubject(workRoot, stored.baseCommit, boundedReview) : void 0;
+  const reviewSubject = implemented ? await captureControllerReviewSubject(workRoot, stored.baseCommit, inspected.stream.events) : void 0;
   const live = await planBoundMission(
     workRoot,
     stored.ticket.path,
     generatedAt,
-    reviewSubject?.files
+    reviewSubject?.files,
+    void 0,
+    stored.inputRecipe
   );
   const livePlan = live.plan;
   if (live.ticket.path !== stored.ticket.path || live.ticket.contentHash !== stored.ticket.contentHash) {
@@ -68639,7 +68763,7 @@ async function dispatchMissionSpecialists(roots, input2, generatedAt = (/* @__PU
       throw new Error("SPECIALIST_CONTRACT_MIGRATION_INVALID: declared or installed contract changed");
     }
     const catalog = await loadSpecialistMigrationComparisonCatalog(coreRoot, assets.declaration, stored.plan);
-    const comparison = await planBoundMission(workRoot, stored.ticket.path, generatedAt, reviewSubject.files, catalog);
+    const comparison = await planBoundMission(workRoot, stored.ticket.path, generatedAt, reviewSubject.files, catalog, stored.inputRecipe);
     for (const specialist of comparison.plan.specialists) {
       if (specialist.specialistId !== assets.declaration.specialistId) {
         currentInputHashes[specialist.specialistId] = canonicalJsonHash({
@@ -68674,19 +68798,6 @@ async function dispatchMissionSpecialists(roots, input2, generatedAt = (/* @__PU
     reviewedCommit: reviewSubject.reviewedCommit,
     acceptanceCriteriaHash: stored.ticket.contentHash
   };
-  if (reviewBinding2 !== void 0) {
-    const restored = validatedRecoveredReviewEvents(inspected.stream.events);
-    if (!restored.ok) throw new Error(`MISSION_RECOVERY_INVALID: ${restored.reasons.join("; ")}`);
-    const hasProvenanceRecovery = inspected.stream.events.some((event) => event.kind === "mission.recovered" && objectField(objectField(objectField(event.payload, "request"), "disposition"), "kind") === "review-provenance");
-    if (hasProvenanceRecovery) for (const event of restored.events) {
-      if (event.kind !== "specialist.completed") continue;
-      const receipt2 = parseSpecialistCompletionValue(objectField(event.payload, "completion"))?.review;
-      const hash7 = objectField(event.payload, "inputHash");
-      if (receipt2 !== void 0 && sameReviewSubject(receipt2, reviewBinding2) && typeof hash7 === "string") {
-        currentInputHashes[event.subject] = hash7;
-      }
-    }
-  }
   const decision = orchestrateMissionTeam({
     ...reviewBinding2 === void 0 ? {} : { reviewSubject: reviewBinding2 },
     plan: stored.plan,
@@ -69010,7 +69121,7 @@ Fix: ${parsed.fix}
   const journal = roots.installRoot;
   try {
     if (parsed.kind === "plan") {
-      const plan2 = await planMission(root, parsed.ticketPath);
+      const plan2 = await planMission(root, parsed.ticketPath, void 0, "project-v1");
       process.stdout.write(parsed.json ? `${JSON.stringify(plan2)}
 ` : `${renderPlan(plan2)}
 `);
@@ -69095,7 +69206,7 @@ ${dispatched.envelopes.map((envelope) => `${envelope.agentName} ${envelope.stage
     }
     if (parsed.kind === "start") {
       const baseCommit = parsed.ticketPath === void 0 ? void 0 : await missionReviewBase(root);
-      const bound = parsed.ticketPath === void 0 ? void 0 : await planBoundMission(root, parsed.ticketPath);
+      const bound = parsed.ticketPath === void 0 ? void 0 : await planBoundMission(root, parsed.ticketPath, void 0, void 0, void 0, "project-v1");
       const plan2 = bound?.plan;
       const diff = plan2 === void 0 ? await gitFiles(root) : void 0;
       const stack = diff === void 0 ? void 0 : detectedStack(root, detectProfileInput(root, diff.files));
@@ -69114,7 +69225,7 @@ ${dispatched.envelopes.map((envelope) => `${envelope.agentName} ${envelope.stage
       const controllerPlan = plan2 === void 0 ? void 0 : missionSpecialistPlan(plan2);
       const ticketBinding = bound?.ticket;
       const runtimeIdentity = bound === void 0 ? void 0 : coordinatorRuntimeIdentity(process.env);
-      const routingHash = controllerPlan === void 0 ? void 0 : ticketBinding === void 0 ? void 0 : missionControllerRoutingHash(controllerPlan, ticketBinding, baseCommit);
+      const routingHash = controllerPlan === void 0 ? void 0 : ticketBinding === void 0 ? void 0 : missionControllerRoutingHash(controllerPlan, ticketBinding, baseCommit, "project-v1");
       await createMission(journal, {
         missionId,
         title: parsed.title,
@@ -69141,7 +69252,8 @@ ${dispatched.envelopes.map((envelope) => `${envelope.agentName} ${envelope.stage
           missionId,
           controllerPlan,
           ticketBinding,
-          baseCommit
+          baseCommit,
+          "project-v1"
         );
         if (storedHash !== routingHash) {
           throw new Error("MISSION_CONTROLLER_PLAN_INVALID: routing hash changed while storing");