voidmachine 5.0.6 → 5.0.7

package/core-assets/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness",
-  "version": "5.0.6",
+  "version": "5.0.7",
   "description": "VoidCorp universal craftsman skills (void-tdd, void-typescript-strict, void-hexagonal-architecture, void-domain-driven-design, void-functional, void-code-review, void-api-and-interface-design, void-source-driven-development, void-context, void-learn, void-decide, void-claude-md, void-observability, void-security-guidance, ...) plus 12 PreToolUse enforcement hooks (tdd-guard, no-any, protect-sensitive-files, block-dangerous-bash, no-ai-design-slop, ...) and PostToolUse/SessionStart lifecycle hooks (incl. trim-large-output token frugality), five read-only critics including doctrine-critic, native architecture/security/QA specialists, and the void-graph, void-doctor and void-audit gestures, which are skills like everything else.",
   "author": {
     "name": "VoidCorp",

package/core-assets/data/catalog.v3.json

@@ -5,7 +5,7 @@
   "source": {
     "kind": "adapter",
     "version": "3.0.0-alpha.1",
-    "rootHash": "sha256:e38546e5aa7fcb09bddd3c33954b340026d7d92ae9d74b0272191043b98cd706"
+    "rootHash": "sha256:7a824dcd695bae061ba5ee2b9e797032682dd8ace6a2957015c8a1949248d5d7"
   },
   "nodes": [
     {
@@ -4331,7 +4331,7 @@
             }
           ],
           "id": "skill:void-implement",
-          "lines": 192,
+          "lines": 193,
           "name": "void-implement",
           "owner": "folpe",
           "pack": null,
@@ -4340,7 +4340,7 @@
             "codex"
           ],
           "source": "packages/core/skills/void-implement/SKILL.md",
-          "staticTokens": 5800,
+          "staticTokens": 5864,
           "type": "skill"
         }
       },

package/core-assets/data/certification.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "harnessVersion": "5.0.6",
+  "harnessVersion": "5.0.7",
   "capabilities": [
     {
       "id": "skill:pack-mobile/void-eas-build-profile",

package/core-assets/data/model.json

@@ -2195,7 +2195,7 @@
         }
       ],
       "id": "skill:void-implement",
-      "lines": 192,
+      "lines": 193,
       "name": "void-implement",
       "owner": "folpe",
       "pack": null,
@@ -2204,7 +2204,7 @@
         "codex"
       ],
       "source": "packages/core/skills/void-implement/SKILL.md",
-      "staticTokens": 5800,
+      "staticTokens": 5864,
       "type": "skill"
     },
     {

package/core-assets/skills/void-implement/SKILL.md

@@ -36,11 +36,12 @@ materializes its runtime-neutral specialist envelopes from the current plan.
 1. Keep one `leadWriterId` for implementation and every correction. The implementer owns
    the worktree and code; specialists and the independent reviewer never edit.
 2. Start with `mission start --ticket <ticket>` and follow `mission dispatch --id <mission>
-   --json`. The frozen task and controller own routing, state and correction budget. Before
-   implementation, launch only the risk-relevant preparation specialists returned by dispatch,
-   each envelope through `void-orchestrate` using the native runtime (pass 5). Collect each result without
-   inventing a completion. Record each actual start and completion with `mission specialist-event
-   --id <mission>`. A missing response resumes the run it already has, never another cycle.
+   --json`. The frozen task and controller own routing, state and correction budget. Normal
+   dispatch starts the writer without a compulsory preparation panel. Consult a targeted native
+   specialist only when a concrete risk or unresolved question warrants advice (pass 5).
+   For canonical `invoke-specialists` actions, pass each envelope unchanged through
+   `void-orchestrate` and record actual starts/results with `mission specialist-event --id <mission>`.
+   Reconcile any existing invocation; a missing response resumes its run, never another cycle.
 3. The implementer implements and verifies, then commits the candidate. Record the pending
    writer receipt with `mission writer-event --id <mission>`. Review must bind an exact
    `reviewedCommit`, `baseCommit` and `acceptanceCriteriaHash`; a mutable worktree is insufficient.
@@ -101,7 +102,7 @@ Run in order. Each pass names the skill it composes and the predicate that fires
 2. **Architecture pass** (IF it touches structure, a module boundary, the data model, or public types). Compose `void-hexagonal-architecture`, `void-domain-driven-design`, agents `type-design-analyzer` + `doctrine-critic`. Confirm the applicable ADR is honored.
 3. **Source grounding** (ALWAYS; the source depends on what the change touches). Read the relevant sources before the first line, per the Anti-rustine section of `PHILOSOPHY.md`. For a third-party configuration, schema or call signature, compose `void-source-driven-development`: official documentation **of the installed version**, never an upgrade by default. For internal code, read the owning contract, types, source and project docs of what you are about to change. Assumed semantics produce bugs that cost hours to find, and the assumption is invisible in the diff — which is why this runs before the writing rather than at review. Cite a source briefly when it helps understand or record a choice; a missing citation never blocks on its own.
 4. **Migration safety** (IF it changes a DB schema or ships a migration). Compose `void-migrations` (and `void-drizzle-migration-safe` on a Drizzle/Postgres stack): zero-downtime, two-phase, batched backfill, locking analysis. **Once the migration is generated and safety-reviewed, apply it to the dev/local database before the TDD and E2E passes run** — otherwise those tests execute against a stale schema and prove nothing about the new shape. **This cycle only ever applies to dev/local; production migrations run through CI / GitHub Actions on merge, never from a worker or this session** (see the `void-migrations` anti-rule). A schema change must never reach the rest of the cycle without this pass.
-5. **Convene the panel** (ALWAYS once, in `team` mode). With `panel.provider: orchestrator`, consume ORCH's supplied panel and never launch another. Otherwise call `mission dispatch --json`: its first `invoke-specialists` action is at `stage: 'pre-implementation'`, before code. Compose `void-orchestrate` for native invocation. Pass the envelope's runtime, agentName, missionId, contextPack, reviewSubject and reviewScope unchanged; record actual starts and complete results using `mission specialist-event`. Reconcile an existing invocation before dispatch; uncertain identity means no launch. Keep at most four simultaneous agents, wait in bounded slices, and never fail an agent merely because a wait timed out. Findings brief the single writer; a concrete blocked verdict is resolved before implementation. Later controller stages reuse this transport and never replay preparation. Missing required capability is diagnosed, never fabricated.
+5. **Targeted preparation advice** (IF a concrete risk or unresolved question warrants a specialist). Use the existing professional passes and `void-orchestrate` to consult only the relevant native specialist. Bind the question to the actual brief, cited artifacts, boundary or risk being examined; revisit only the affected advice when those materially change. Baseline/profile applicability alone does not require a panel, and advice is not an automatic canonical gate. With `panel.provider: orchestrator`, consume its supplied advice without launching a duplicate. For canonical `invoke-specialists` actions, preserve runtime, agentName, missionId, contextPack, reviewSubject and reviewScope; record actual starts/results, never invented receipts. Reconcile uncertain invocations before launching, keep at most four simultaneous agents, and never fail one on a wait timeout. Preserve real unresolved findings and author-owned evidence obligations. Already-started preparation may finish as advice after writer admission; it cannot satisfy final code review or authorize a new preparation invocation after implementation starts.
 6. **TDD implementation** (ALWAYS). During development, the coordinator may create or reuse a draft pull request for the branch. Keep work-in-progress PRs in draft and run focused local checks; do not wait for full remote CI per iteration. `void-verify` owns the transition to complete integration checks and its portable CI template. The single lead writer composes `void-tdd` + `void-testing`. Red, green, refactor. Unit tests for the behavior, green before moving on. Review specialists remain read-only.
 7. **Async + idempotency** (IF it sends email, calls an external side-effecting API, enqueues a job, or mints a single-use token). Compose `void-async-safety`: idempotency keys, replay/dedup window, bounded retries, single-use enforcement.
 8. **End-to-end tests** (IF it touches a user-facing flow). Write/extend the E2E suite (Playwright). The path a user actually walks, not just the unit.

package/dist/main.js

@@ -35813,7 +35813,19 @@ function collectCompletions(events, stage, expectedSource, stageStartSeqExclusiv
   const contextIds = /* @__PURE__ */ new Set();
   const currentFailedRounds = [];
   let historicalHighestRound = 0;
-  const inStageWindow = (event) => (afterSeqExclusive === void 0 || event.seq > afterSeqExclusive) && (beforeSeqExclusive === void 0 || event.seq < beforeSeqExclusive);
+  const inStageWindow = (event) => {
+    let seq = event.seq;
+    if (stage === "pre-implementation" && event.kind === "specialist.completed") {
+      const payload = record7(event.payload);
+      const mission2 = events.find((candidate) => candidate.kind === "mission.started" && candidate.missionId === event.missionId && candidate.seq < event.seq);
+      const planHash = record7(mission2?.payload)?.["planHash"];
+      const matches = (candidate) => candidate.missionId === event.missionId && candidate.subject === event.subject && ["stage", "reviewRound", "inputHash", "contractVersion"].every((key) => record7(candidate.payload)?.[key] === payload?.[key]);
+      const invocation = events.find((candidate) => candidate.seq < event.seq && candidate.kind === "specialist.started" && candidate.source === expectedSource && matches(candidate) && typeof payload?.contextId === "string" && record7(candidate.payload)?.contextId === payload.contextId);
+      if (invocation !== void 0 && events.some((candidate) => candidate.seq < invocation.seq && candidate.kind === "specialist.requested" && candidate.source === "void-harness:mission.dispatch" && typeof planHash === "string" && SHA256.test(planHash) && record7(candidate.payload)?.["planHash"] === planHash && `runtime:${record7(candidate.payload)?.["runtime"]}` === expectedSource && matches(candidate)))
+        seq = invocation.seq;
+    }
+    return (afterSeqExclusive === void 0 || seq > afterSeqExclusive) && (beforeSeqExclusive === void 0 || seq < beforeSeqExclusive);
+  };
   for (const event of events) {
     const payload = record7(event.payload);
     if (event.kind === "specialist.failed") {
@@ -38739,10 +38751,10 @@ function lifecycleField(event, key) {
 function sameSpecialistDispatch(left, right) {
   return left.missionId === right.missionId && left.subject === right.subject && lifecycleField(left, "contractVersion") === lifecycleField(right, "contractVersion") && lifecycleField(left, "stage") === lifecycleField(right, "stage") && lifecycleField(left, "reviewRound") === lifecycleField(right, "reviewRound") && lifecycleField(left, "inputHash") === lifecycleField(right, "inputHash");
 }
-function unboundCompletionReasons(input2, runtime2) {
+function unboundCompletionReasons(input2, runtime2, completions2 = input2.stream.events.filter((event) => event.kind === "specialist.completed"), invocationBeforeSeq) {
   const reasons = [];
-  for (const completion of input2.stream.events.filter((event) => event.kind === "specialist.completed")) {
-    const started = input2.stream.events.find((event) => event.seq < completion.seq && event.kind === "specialist.started" && event.source === `runtime:${runtime2 ?? "invalid"}` && sameSpecialistDispatch(event, completion) && (lifecycleField(completion, "reviewInvocationEventId") === void 0 ? lifecycleField(event, "contextId") === lifecycleField(completion, "contextId") : event.eventId === lifecycleField(completion, "reviewInvocationEventId") && lifecycleField(event, "reviewerId") === parseSpecialistCompletionValue(lifecycleField(completion, "completion"))?.review?.reviewerId));
+  for (const completion of completions2) {
+    const started = input2.stream.events.find((event) => event.seq < completion.seq && (invocationBeforeSeq === void 0 || event.seq < invocationBeforeSeq) && event.kind === "specialist.started" && event.source === `runtime:${runtime2 ?? "invalid"}` && sameSpecialistDispatch(event, completion) && (lifecycleField(completion, "reviewInvocationEventId") === void 0 ? lifecycleField(event, "contextId") === lifecycleField(completion, "contextId") : event.eventId === lifecycleField(completion, "reviewInvocationEventId") && lifecycleField(event, "reviewerId") === parseSpecialistCompletionValue(lifecycleField(completion, "completion"))?.review?.reviewerId));
     const requested = started === void 0 ? void 0 : input2.stream.events.find((event) => event.seq < started.seq && event.kind === "specialist.requested" && event.source === "void-harness:mission.dispatch" && sameSpecialistDispatch(event, completion) && lifecycleField(event, "planHash") === input2.plan.planHash && lifecycleField(event, "runtime") === runtime2);
     if (requested === void 0 || started === void 0) {
       reasons.push(`specialist lifecycle is unbound: ${completion.subject}`);
@@ -38816,7 +38828,7 @@ function decideReviewPhase(start, review, baseVerdict, stage) {
       action: stage === "pre-implementation" ? {
         kind: "run-preparation-correction",
         writerId: start.leadWriterId,
-        findingIds: review.findings.filter((finding) => !start.boundedReview || finding.classification === "blocking").map((finding) => finding.findingId)
+        findingIds: review.findings.filter((finding) => finding.classification !== "advisory").map((finding) => finding.findingId)
       } : {
         kind: "run-correction",
         writerId: start.leadWriterId,
@@ -38897,15 +38909,6 @@ function retainedPreparationSpecialists(input2, events, boundary, targets) {
     return result?.["verdict"] === "pass" && result["contractVersion"] === contractVersions(input2.plan)[id3] && lifecycleField(latest, "inputHash") === input2.currentInputHashesByStage["pre-implementation"][id3];
   });
 }
-function preparationHasMissingOrStaleReviews(input2, events, boundary) {
-  return requiredSpecialists(input2.plan, "pre-implementation").some((id3) => {
-    const latest = events.filter((item) => item.kind === "specialist.completed" && item.subject === id3 && item.seq < boundary && lifecycleField(item, "stage") === "pre-implementation").at(-1);
-    if (latest === void 0)
-      return true;
-    const result = record15(lifecycleField(latest, "completion") ?? null);
-    return result?.["contractVersion"] !== contractVersions(input2.plan)[id3] || lifecycleField(latest, "inputHash") !== input2.currentInputHashesByStage["pre-implementation"][id3];
-  });
-}
 function pendingRecoveredCorrectionFindingIds(events) {
   const recovery = events.filter((event) => event.kind === "mission.recovered").at(-1);
   if (recovery === void 0 || events.some((event) => event.seq > recovery.seq && event.kind === "lead-writer.completed"))
@@ -38962,14 +38965,18 @@ function orchestrateMissionTeam(originalInput) {
   const firstWriterSeq = completions2.length === 0 ? void 0 : Math.min(...completions2.map((event) => event.seq));
   const implementationCompletions = completions2.filter((event) => leadWriterActionKind(event) !== "run-preparation-correction");
   const firstImplementationSeq = implementationCompletions.length === 0 ? void 0 : Math.min(...implementationCompletions.map((event) => event.seq));
-  const preparationCorrectionCompleted = preparationCorrections.length > 0;
-  const preparationFollowupRequired = preparationRecovery !== void 0 || lastPreparationSeq !== void 0 && preparationHasMissingOrStaleReviews(input2, reviewEvents, lastPreparationSeq);
-  const latePreparationCompletion = lastPreparationSeq !== void 0 && input2.stream.events.some((event) => event.seq > lastPreparationSeq && event.kind === "specialist.completed" && lifecycleField(event, "stage") === "pre-implementation");
+  const preparationFollowupRequired = preparationRecovery !== void 0;
   const lastWriterSeq = completions2.length === 0 ? void 0 : Math.max(...completions2.map((event) => event.seq));
   const missionStartSeq = input2.stream.events.find((event) => event.kind === "mission.started")?.seq;
   const expectedSource = start.runtime === "claude" ? "runtime:claude" : "runtime:codex";
   const obligations = evidenceObligations(input2, expectedSource, firstImplementationSeq === void 0 ? "pre-implementation" : "post-implementation");
   const preparationObligationIds = new Set(obligations.obligations.filter((obligation) => input2.stream.events.some((event) => event.eventId === obligation.completionEventId && lifecycleField(event, "stage") === "pre-implementation")).map((obligation) => obligation.obligationId));
+  const preparationBoundary = Math.max(lastPreparationSeq ?? 0, ...completions2.filter((event) => leadWriterActionKind(event) === "run-correction").map((event) => event.seq));
+  const observedPreparation = reviewEvents.filter((event) => event.kind === "specialist.completed" && lifecycleField(event, "stage") === "pre-implementation");
+  const unresolvedPreparation = [...new Map(observedPreparation.filter((event) => event.seq > preparationBoundary).map((event) => [event.subject, event])).values()].filter((event) => {
+    const completion = parseSpecialistCompletionValue(lifecycleField(event, "completion"));
+    return completion !== void 0 && completion.verdict !== "pass" && (completion.verdict !== "changes-requested" || completion.findings.length === 0 || completion.findings.some((finding) => finding.classification !== "advisory"));
+  });
   const preReview = reduceReviewLoop({
     stage: "pre-implementation",
     expectedSource,
@@ -38977,9 +38984,10 @@ function orchestrateMissionTeam(originalInput) {
       stageStartSeqExclusive: missionStartSeq,
       afterSeqExclusive: lastPreparationSeq
     },
-    ...firstWriterSeq === void 0 ? {} : { beforeSeqExclusive: firstWriterSeq },
     events: reviewEvents,
-    requiredSpecialists: requiredSpecialists(input2.plan, "pre-implementation"),
+    // Historical advice is inspected, but the frozen plan is no longer a
+    // compulsory preparation quorum. Explicit admitted recoveries retain theirs.
+    requiredSpecialists: requiredSpecialists(input2.plan, "pre-implementation").filter((id3) => preparationRecovery !== void 0 || (unresolvedPreparation.length > 0 ? unresolvedPreparation : observedPreparation).some((event) => event.subject === id3)),
     contractVersions: contractVersions(input2.plan),
     currentInputHashes: input2.currentInputHashesByStage["pre-implementation"],
     maxRounds: input2.maxReviewRounds,
@@ -38987,11 +38995,17 @@ function orchestrateMissionTeam(originalInput) {
       ...obligations,
       blockingObligationIds: obligations.blockingObligationIds.filter((id3) => preparationObligationIds.has(id3))
     },
+    ...preparationRecovery === void 0 && lastPreparationSeq !== void 0 && missionStartSeq !== void 0 ? {
+      retainedSpecialists: requiredSpecialists(input2.plan, "pre-implementation").filter((id3) => unresolvedPreparation.some((event) => event.subject === id3))
+    } : {},
     ...!preparationFollowupRequired || lastPreparationSeq === void 0 || preparationRecovery !== void 0 && lastPreparationSeq <= preparationRecovery.recoverySeq ? {} : {
       retainedSpecialists: retainedPreparationSpecialists(input2, reviewEvents, lastPreparationSeq, preparationRecovery?.specialistIds ?? [])
     }
   });
   const baseVerdict = deriveMissionVerdict(input2.stream, input2.evidenceContext);
+  if (baseVerdict.status === "degraded") {
+    return stopped("degraded", preReview, baseVerdict, baseVerdict.reasons);
+  }
   const invalidRuntime = input2.specialistRuntime === void 0 || !Array.isArray(input2.specialistRuntime.limitations) || input2.specialistRuntime.limitations.some((item) => typeof item !== "string" || item.trim() === "") || !["available", "degraded", "unavailable"].includes(input2.specialistRuntime.status);
   if (invalidRuntime) {
     return stopped("degraded", preReview, baseVerdict, [
@@ -39042,8 +39056,17 @@ function orchestrateMissionTeam(originalInput) {
   if (preparationRecovery?.replacement && firstImplementationSeq === void 0 && requiredSpecialists(input2.plan, "pre-implementation").some((id3) => input2.currentInputHashesByStage["pre-implementation"][id3] !== preparationRecovery.inputHashes[id3] || contractVersions(input2.plan)[id3] !== preparationRecovery.contractVersions[id3])) {
     return stopped("blocked", preReview, baseVerdict, ["Preparation replacement inputs or contracts changed; reconcile the admitted subject before dispatch"]);
   }
-  if (firstImplementationSeq !== void 0 && input2.stream.events.some((event) => event.kind === "specialist.completed" && event.seq > firstImplementationSeq && lifecycleField(event, "stage") === "pre-implementation")) {
-    return stopped("blocked", preReview, baseVerdict, ["pre-implementation review was replayed after implementation"]);
+  const implementationBoundary = input2.stream.events.find((event) => event.kind === "lead-writer.requested" && leadWriterActionKind(event) === "run-lead-writer")?.seq ?? firstImplementationSeq;
+  if (implementationBoundary !== void 0) {
+    const latePreparation = observedPreparation.filter((event) => event.seq > implementationBoundary);
+    const lifecycleReasons = unboundCompletionReasons(input2, start.runtime, latePreparation, implementationBoundary);
+    const replayed = input2.stream.events.some((event) => event.seq > implementationBoundary && event.kind === "specialist.started" && lifecycleField(event, "stage") === "pre-implementation");
+    if (replayed || lifecycleReasons.length > 0) {
+      return stopped("blocked", preReview, baseVerdict, ["pre-implementation review was replayed after implementation", ...lifecycleReasons]);
+    }
+  }
+  if (preReview.issues.length > 0) {
+    return decideReviewPhase(start, preReview, baseVerdict, "pre-implementation");
   }
   const pendingEvidence = obligationStop(obligations, preReview, baseVerdict);
   const migration = migrated.migration;
@@ -39054,7 +39077,7 @@ function orchestrateMissionTeam(originalInput) {
     }
     const terminal = input2.stream.events.some((event) => event.seq > migration.seq && event.subject === receipt2.specialistId && ["specialist.completed", "specialist.failed"].includes(event.kind));
     const onlyAuthorObligations = obligations.issues.length === 0 && obligations.blockingObligationIds.every((id3) => receipt2.pendingAuthorObligationIds.includes(id3));
-    const preparationAdmitted = preReview.readyForVerdict || preparationCorrectionCompleted && !preparationFollowupRequired && firstImplementationSeq !== void 0;
+    const preparationAdmitted = firstImplementationSeq !== void 0;
     if (!terminal && onlyAuthorObligations && preparationAdmitted) {
       const reasons = ["Explicit contract migration requires one fresh visual assessment; historical evidence obligations remain due"];
       return applyRuntimeCertification({
@@ -39120,22 +39143,30 @@ function orchestrateMissionTeam(originalInput) {
       reasons
     }, input2.specialistRuntime);
   }
-  if (!preparationFollowupRequired && preparationCorrectionCompleted && latePreparationCompletion) {
-    return applyRuntimeCertification(stopped("blocked", preReview, baseVerdict, ["pre-implementation review was replayed after preparation correction"]), input2.specialistRuntime);
+  if (preparationFollowupRequired && !preReview.readyForVerdict) {
+    return applyRuntimeCertification(decideReviewPhase(start, preReview, baseVerdict, "pre-implementation"), input2.specialistRuntime);
   }
-  if (!preparationFollowupRequired && preparationCorrectionCompleted && firstImplementationSeq === void 0) {
-    const reasons = ["preparation correction completed; implementation is pending"];
+  if (unresolvedPreparation.length > 0) {
+    const reasons = unresolvedPreparation.flatMap((event) => {
+      const completion = parseSpecialistCompletionValue(lifecycleField(event, "completion"));
+      return completion === void 0 ? [] : [
+        ...completion.findings.map((finding) => finding.summary),
+        ...completion.limitations
+      ];
+    });
+    if (preReview.staleSpecialists.some((id3) => unresolvedPreparation.some((event) => event.subject === id3))) {
+      return stopped("blocked", preReview, baseVerdict, ["Existing preparation findings require reconciliation against changed inputs.", ...reasons]);
+    }
+    const decision = decideReviewPhase(start, preReview, baseVerdict, "pre-implementation");
+    if (decision.action.kind === "run-preparation-correction" && decision.action.findingIds.length === 0) {
+      return stopped("blocked", preReview, baseVerdict, ["Preparation requested changes without an actionable finding.", ...reasons]);
+    }
     return applyRuntimeCertification({
-      phase: "implementation",
-      action: { kind: "run-lead-writer", writerId: start.leadWriterId },
-      review: preReview,
-      verdict: overrideVerdict(baseVerdict, "unverified", reasons),
-      reasons
+      ...decision,
+      reasons: [...decision.reasons, ...reasons],
+      ...firstImplementationSeq !== void 0 && decision.action.kind === "run-preparation-correction" ? { action: { ...decision.action, kind: "run-correction" } } : {}
     }, input2.specialistRuntime);
   }
-  if (!preReview.readyForVerdict && (!preparationCorrectionCompleted || preparationFollowupRequired)) {
-    return applyRuntimeCertification(decideReviewPhase(start, preReview, baseVerdict, "pre-implementation"), input2.specialistRuntime);
-  }
   if (completions2.length === 0) {
     const reasons = ["lead writer implementation is incomplete"];
     return applyRuntimeCertification({
@@ -56469,7 +56500,7 @@ async function missionReviewBase(root) {
     throw new Error("MISSION_REVIEW_BASE_INVALID: a committed Git baseline is required");
   }
 }
-async function captureMissionReviewSubject(root, baseCommit, committed = false, hashFormat = committed ? "committed" : "legacy") {
+async function validateMissionReviewBase(root, baseCommit) {
   if (baseCommit === void 0) {
     throw new Error(
       "MISSION_REVIEW_BASE_MISSING: legacy mission has no review baseline; preserve its history and start a new mission"
@@ -56479,8 +56510,13 @@ async function captureMissionReviewSubject(root, baseCommit, committed = false,
   try {
     await execFile2("git", ["merge-base", "--is-ancestor", baseCommit, "HEAD"], options2);
   } catch {
-    throw new Error("MISSION_REVIEW_BASE_INVALID: baseline is missing or is not an ancestor of HEAD");
+    throw new Error("MISSION_REVIEW_BASE_INVALID: baseline is missing or is not an ancestor of HEAD; return to the mission worktree with a checkout descended from its bound base; preserve the journal");
   }
+  return baseCommit;
+}
+async function captureMissionReviewSubject(root, baseCommit, committed = false, hashFormat = committed ? "committed" : "legacy") {
+  const validatedBase = await validateMissionReviewBase(root, baseCommit);
+  const options2 = { cwd: root, encoding: "utf8", timeout: 1e4, maxBuffer: 4e6 };
   try {
     const paths = ["--", ".", ":(exclude).void/machine/**"];
     const reviewedCommit = committed ? await missionReviewBase(root) : void 0;
@@ -56497,7 +56533,7 @@ async function captureMissionReviewSubject(root, baseCommit, committed = false,
         throw new Error("MISSION_REVIEW_UNCOMMITTED: commit the implementation before independent review");
       }
     }
-    const range = reviewedCommit === void 0 ? [baseCommit] : [baseCommit, reviewedCommit];
+    const range = reviewedCommit === void 0 ? [validatedBase] : [validatedBase, reviewedCommit];
     const [patch, names, untracked] = await Promise.all([
       execFile2("git", [
         "diff",
@@ -56547,11 +56583,11 @@ async function captureMissionReviewSubject(root, baseCommit, committed = false,
       throw new Error("MISSION_REVIEW_CHANGED: HEAD changed while capturing the review subject");
     }
     return Object.freeze({
-      ...reviewedCommit === void 0 ? {} : { baseCommit, reviewedCommit },
+      ...reviewedCommit === void 0 ? {} : { baseCommit: validatedBase, reviewedCommit },
       diff: patch.stdout,
       files,
       hash: canonicalJsonHash({
-        baseCommit,
+        baseCommit: validatedBase,
         ...hashFormat === "legacy" ? {} : { reviewedCommit },
         diff: patch.stdout,
         files: files.files
@@ -68026,7 +68062,7 @@ async function recordSpecialistRequests(root, missionId, envelopes, planHash) {
 init_esm_shims();
 
 // package.json
-var version2 = "5.0.6";
+var version2 = "5.0.7";
 
 // src/lib/runs/verify.ts
 var MAX_CAPTURE_BYTES = 64 * 1024;
@@ -68725,6 +68761,9 @@ async function dispatchMissionSpecialists(roots, input2, generatedAt = (/* @__PU
   const inspected = current?.inspected ?? initialInspection;
   requireOpenMission(inspected.stream.events);
   const implemented = inspected.stream.events.some((event) => event.kind === "lead-writer.completed" && isUnknownRecord(event.payload) && event.payload.actionKind !== "run-preparation-correction");
+  if (!implemented && stored.baseCommit !== void 0) {
+    await validateMissionReviewBase(workRoot, stored.baseCommit);
+  }
   const reviewSubject = implemented ? await captureControllerReviewSubject(workRoot, stored.baseCommit, inspected.stream.events) : void 0;
   const live = await planBoundMission(
     workRoot,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "voidmachine",
-  "version": "5.0.6",
+  "version": "5.0.7",
   "description": "void-machine CLI — install an opinionated engineering doctrine on any project; render deterministic project health. Run via `npx voidmachine`; command: void-machine (alias vm).",
   "license": "MIT",
   "author": "Folpe @ VoidCorp",
@@ -58,10 +58,10 @@
     "ws": "8.21.0",
     "yaml": "^2.5.0",
     "zod": "^4.6.5",
+    "@voidcorp/hook-runner": "0.0.0",
     "@voidcorp/mission-engine": "0.0.0",
-    "@voidcorp/void-machine": "0.0.0",
-    "@voidcorp/harness-graph": "5.0.6",
-    "@voidcorp/hook-runner": "0.0.0"
+    "@voidcorp/harness-graph": "5.0.7",
+    "@voidcorp/void-machine": "0.0.0"
   },
   "scripts": {
     "build": "tsup",