loop-engineer 0.8.0__tar.gz → 0.10.0__tar.gz

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/.claude-plugin/plugin.json

@@ -1,11 +1,25 @@
 {
   "name": "loop-engineer",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Design, launch, verify, repair, and improve agent loops. A Claude-Code-native architect+operator for long-running, verifiable, self-improving agentic-coding systems.",
-  "author": { "name": "Sollan Systems", "url": "https://github.com/SollanSystems" },
+  "author": {
+    "name": "Sollan Systems",
+    "url": "https://github.com/SollanSystems"
+  },
   "homepage": "https://github.com/SollanSystems/loop-engineer",
   "repository": "https://github.com/SollanSystems/loop-engineer",
-  "keywords": ["agent", "loop", "agentic", "verification", "harness", "orchestration", "self-improvement", "claude-code", "eval", "repair"],
+  "keywords": [
+    "agent",
+    "loop",
+    "agentic",
+    "verification",
+    "harness",
+    "orchestration",
+    "self-improvement",
+    "claude-code",
+    "eval",
+    "repair"
+  ],
   "license": "MIT",
   "hooks": {
     "Stop": [

loop_engineer-0.10.0/.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  # Covers .github/workflows/*.yml and the root composite action.yml.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      actions:
+        patterns: ["*"]
+
+  # Runtime is stdlib-only; this watches the optional extras and any future pins.
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/.github/workflows/ci.yml

@@ -5,6 +5,9 @@ on:
     branches: [main]
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   gates:
     name: gates (py${{ matrix.python-version }})
@@ -14,14 +17,14 @@ jobs:
       matrix:
         python-version: ["3.10", "3.11", "3.12"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
       - name: Install gate dependencies
-        run: python -m pip install --upgrade pip pyyaml pytest jsonschema
+        run: python -m pip install --upgrade pip pyyaml pytest jsonschema hypothesis
 
       - name: Frontmatter gate
         run: python -B scripts/validate_frontmatter.py
@@ -45,15 +48,27 @@ jobs:
 
       - name: Quickstart smoke test
         run: |
-          python -B -m loop doctor examples/coverage-repair
+          python -B -m loop doctor --mode release examples/coverage-repair
           python -B -m loop inspect examples/coverage-repair
 
+      - name: Plan lint smoke test
+        run: |
+          python -B -m loop plan-lint --mode release examples/plans/coverage-repair.plan.json
+          if python -B -m loop plan-lint --mode release examples/plans/invalid/cyclic-dependency.plan.json; then
+            echo "::error::cyclic-dependency.plan.json unexpectedly passed plan-lint"
+            exit 1
+          fi
+          if python -B -m loop plan-lint --mode release examples/plans/invalid/missing-goal.plan.json; then
+            echo "::error::missing-goal.plan.json unexpectedly passed plan-lint"
+            exit 1
+          fi
+
   recipe-langgraph:
     name: recipe (langgraph)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
       - name: Install recipe dependencies
@@ -65,8 +80,8 @@ jobs:
     name: recipe (temporal)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
       - name: Install recipe dependencies
@@ -81,7 +96,7 @@ jobs:
     name: action (dogfood on flagship example)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       # The repo root's live .loop/ is gitignored, so it does not exist in a fresh
       # CI checkout — the tracked flagship example is the contract the action gates
       # (doctor-clean, inspect 90/strong in the action's dependency-free install).

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/.github/workflows/publish.yml

@@ -4,13 +4,16 @@ on:
   push:
     tags: ["v*"]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.12"
 
@@ -38,7 +41,7 @@ jobs:
           /tmp/smoke/bin/loop doctor /tmp/smoke-loop
           /tmp/smoke/bin/loop inspect /tmp/smoke-loop || true
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/
@@ -50,7 +53,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: dist
           path: dist/

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/.gitignore

@@ -1,19 +1,20 @@
-# Ephemeral workbench
-.tmp/
+# Ephemeral workbench (root-anchored: examples/*-run fixtures may legitimately
+# contain same-named dirs — .claude/, .taskmaster/, memory/ — that MUST track)
+/.tmp/
 
 # Loop run telemetry (operating-contract state for the self-improvement run; not plugin content)
-.loop/
+/.loop/
 
 # Machine-local Claude Code config + GSD audit telemetry (not plugin content)
-.claude/
-.gsd/
+/.claude/
+/.gsd/
 
 # Local session memory / private build narrative (not plugin content)
-memory/
+/memory/
 
 # Workbench dirs (review scratch + roadmap drafts; not plugin content)
-review/
-roadmap/
+/review/
+/roadmap/
 
 # Python
 __pycache__/

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/CHANGELOG.md

@@ -14,6 +14,152 @@ All notable changes to `loop-engineer` are documented here.
   `WORKFLOW.md` and `README.md` are reworded to describe the mechanism; the 0.3.4
   history is left intact.
 
+## 0.10.0 — 2026-07-25
+
+**The hash-linked event chain.** Every `loop-engineer/event@1` row now carries
+`prev_event_hash` and `event_hash` — a sha256 over a canonical JSON preimage of
+the event's hashed fields, `prev_event_hash` among them. Canonical form is
+`json.dumps(sort_keys=True, separators=(",", ":"), ensure_ascii=False,
+allow_nan=False)` encoded UTF-8, pinned normatively with conformance vectors in
+`reference/repo-os-contract.md` §16. The digest is computed **inside the store on
+append**, never supplied by a caller, and the deterministic reducer re-verifies
+each link as it folds: a spliced, reordered, or edited row raises
+`ChainBreakError` and stops the fold instead of projecting a plausible state.
+`loop.chain` is stdlib-only and imports no other module of this package, so
+`verify_chain()` re-verifies an exported event stream without the store code
+(#82).
+
+**Store generations and `loop migrate`.** A fresh store stamps `PRAGMA
+user_version = 2` and widens the `events` DDL with `event_hash TEXT NOT NULL`.
+`loop migrate` is the only store-upgrade path — explicit, idempotent, and
+non-rewriting: it adds the two columns and stamps `user_version = 2`, but never
+backfills hashes onto existing rows, because the append-only `BEFORE UPDATE`
+trigger forbids it. Pre-migration rows therefore stay an **unchained prefix**
+that doctor reports rather than elides, and the first post-migration append is a
+chain genesis.
+
+**Anchored doctor gate.** `loop doctor` gains an `event_store.chain` block
+(`head`, `unchained_prefix`) and a `--expect-chain-head SHA256` flag — also
+accepted by `validate` and `verify` — that fails the gate unless the store's head
+equals an externally remembered anchor. Four new issue codes: `event_chain_broken`
+(a link does not verify), `chain_anchor_mismatch` (the head differs from the
+supplied anchor, or an anchor was supplied with no readable store),
+`missing_event_store` (`events.db` is absent while SQLite sidecars remain — the
+store was deleted), and `chain_columns_missing` (the store still declares
+generation 2 with its chain columns gone — the lazy downgrade). The composite
+action publishes the observed head as a `chain-head` output on every run and
+optionally enforces one through an `expect-chain-head` input.
+
+**Integrity boundary.** The chain is **tamper-evident relative to an anchored
+head** — a detection property, not a prevention one, and scoped to the anchor.
+It detects splicing, reordering, an edit that does not recompute every downstream
+digest, and byte corruption of any hashed field; given an anchor it detects *any*
+divergence from the head that anchor names, including tail truncation, which is
+otherwise invisible because deleting trailing events leaves a shorter but
+internally valid chain. It does **not** detect a full in-workspace recompute, a
+chain-column downgrade that also resets `user_version`, deletion of the store when
+no sidecars remain and no anchor is supplied, well-formed lies (nothing in the
+chain judges whether a payload is true), or anything in a never-migrated prefix.
+And the window stays open at the head: "An anchor certifies the log only up to the
+anchored head. Everything appended after the last externally-read anchor —
+including a rewrite of the suffix — is unverified until the next anchor is read
+and remembered outside the workspace. The chain narrows the tampering window; it
+does not close it." `scripts/test_adversarial_chain.py` pins both sides — the
+attacks that are caught and four `PINNED LIMITATION` cases that are not. The full
+boundary, with the anchor's trust assumptions, is normative in
+`reference/repo-os-contract.md` §16.
+
+**Stricter reads.** `status`, `replay`, and `doctor` now **reject** a store
+containing any schema-invalid event, raising `invalid_event` instead of silently
+folding past it as they did in 0.9.0. Validation runs before the fold, so a tamper
+that also violates `event@1` surfaces as `invalid_event` rather than
+`event_chain_broken`.
+
+**Sidecars resolved.** Read verbs no longer leave `-wal`/`-shm` files beside a
+clean `.loop/events.db` — the 0.9.0 known limitation recorded below. #80 landed
+the first half, opening read-only connections with `immutable=1` when no WAL
+sidecar exists; this release completes it with a two-stage retry so that a lost
+`immutable=1` race against a live writer retries plainly as `mode=ro` before
+anything may be called corruption, the same read path in the runner, and a
+zero-carve-out tripwire proving every read verb leaves a clean store
+byte-identical on both store generations.
+
+**Compatibility, both directions.** Pre-0.10.0 *readers* can read a v2 store:
+their explicit ten-column `SELECT` is unaffected by the two added columns.
+Pre-0.10.0 *writers* must not append to a chained store. A fresh v0.10.0 store
+refuses such an append at the database, because `event_hash` is `NOT NULL`; a
+*migrated* store keeps its columns nullable, so the append succeeds and produces a
+permanent, unrepairable `event_chain_broken` — the row cannot be re-linked
+afterwards, since `UPDATE` is trigger-blocked. Pin your `loop-engineer` and action
+version per store.
+
+Test baseline: 1021 passed / 16 skipped with the `yaml`+`schemas` extras;
+951 / 86 in structural-fallback mode (PyYAML only). Both measured in a fresh
+worktree; a live checkout reads +2 passed / −2 skipped through two
+checked-when-present tests.
+
+## 0.9.0 — 2026-07-17
+
+**The event-sourced kernel.** The contract gains a durable runtime substrate:
+`loop-engineer/event@1` events in an append-only SQLite store
+(`.loop/events.db` — WAL, `synchronous=FULL`, no-update/no-delete triggers,
+`expected_sequence` compare-and-swap) folded by a deterministic reducer that
+enforces FSM legality, the all-required completion gate, and terminal
+immutability through the same `loop.fsm`/`loop.completion` modules the
+writers use (#62). Around it: a canonical intermediate-state FSM with
+unknown-state validation and writer timestamps (#59); `loop-engineer/plan@1`
+— a Loop Plan IR with a `plan-lint` verb and a typed capability vocabulary
+(#61); `loop-engineer/evidence@1` — hashed evidence objects with provenance,
+re-verifiable byte-for-byte (#63); administrative `terminal_superseded`
+events — the only event a terminated run admits, so a wrong terminal is
+corrected on the record instead of edited in place (#64); a run-control event
+vocabulary for approval, pause, and resume (#73); and explicit validation
+modes `--mode basic|strict|release` across the CLI (#60).
+
+**Runtime verbs.** `loop run` — event-sourced single-step dispatch with
+crash-safe resume (#71); read-only `loop status` and `loop replay` (#70);
+`loop simulate` — strictly read-only dry-run dispatch prediction (#75);
+`approve` / `pause` / `resume` / `cancel` (#74); a subprocess-isolated
+verifier runner — shlex argv, no shell, wall-clock cap, bounded output tail,
+typed failure classes — plus typed fail-loud stubs for the not-yet-shipped
+run modes (#72); `loop architect` as a typed fail-loud deferral (#76). And
+`loop doctor` now composes an event-store consistency gate over
+`status`/`replay` whenever `.loop/events.db` exists — one hard gate across
+the file layer and the event log (#77).
+
+**Completion-semantics hardening (Phase 0).** `Succeeded` now requires
+**all** required criteria satisfied plus evidence — the prior any-true
+reading was a correctness bug, fixed in one shared `loop/completion.py`
+wired into the writer API, the integrations projection, and the contract
+validator's G1 check. `terminal_state.json` is create-once (atomic;
+`force` always raises); iteration ids are canonical ints (legacy decimal
+strings stay read-compatible); `terminal@1` gains an additive
+`completion_policy` (#48).
+
+**Adversarial hardening.** A property-based kernel suite over FSM legality,
+G1 completion, supersession, and replay determinism (#65), and a
+process/security suite — real crash injection at code-controlled barriers,
+verifier tampering, workspace-escape TOCTOU (#66). The `verify_evidence()`
+symlink-swap TOCTOU that suite discovered (#67) is closed by fd-pinned
+open-then-verify (#69), retiring the strict xfail marker.
+
+**Scoreboard, funnel, housekeeping.** The ST5 harness scoreboard — 9 public
+harnesses read through a foreign-layout registry with 8 vendored fixtures
+(#41); contributor-funnel fixes — trigger-phrase disambiguation (#42),
+documentation-completeness labels on the self-eval (#43),
+`approval_requested`/`replanned` recognized as honest-red metrics tokens
+(#44), metrics-clean RUNLOG seeding (#45); Dependabot version updates and
+least-privilege workflow permissions (#46, #47).
+
+**Known limitation.** Read verbs over the event store leave SQLite
+`-wal`/`-shm` sidecars next to `.loop/events.db` (read-only connections
+recreate them and cannot checkpoint on close). Store content is never
+mutated, but tree-byte-identity checks over a store-backed workspace will
+notice them. *(Resolved in 0.10.0 — see "Sidecars resolved" above.)*
+
+Test baseline: 933 passed / 16 skipped with the `yaml`+`schemas` extras;
+864 / 85 in structural-fallback mode (PyYAML only).
+
 ## 0.8.0 — 2026-07-09
 
 **ST3 — integration adapters.** `loop/integrations.py`: an engine-neutral,

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/CONTRIBUTING.md

@@ -11,7 +11,7 @@ you open a PR, all of these must be green (CI runs them on every push):
 ```bash
 # from the repo root
 python3 scripts/validate_frontmatter.py     # SKILL.md frontmatter
-python3 scripts/self_eval.py                # 13 structural invariants
+python3 scripts/self_eval.py                # 13 structural/doc-completeness invariants
 python3 -m pytest -q scripts                # the test suite
 python3 -m py_compile loop/*.py scripts/*.py
 python3 -m loop doctor   examples/coverage-repair   # quickstart still works
@@ -20,6 +20,16 @@ python3 -m loop inspect  examples/coverage-repair
 
 If you don't have the deps, prefix with `uv run --with pyyaml --with pytest`.
 
+`scripts/test_adversarial_kernel.py` also uses the dev-only `hypothesis` dependency: install it with `pip install -e ".[dev]"`, or use `uv run --with hypothesis --with pytest`. A plain install never pulls it in; without it, those property tests skip rather than fail.
+
+`scripts/test_adversarial_process.py` spawns short-lived child processes and sends real `SIGKILL` signals to simulate mid-transaction crashes; it is POSIX-only (CI uses `ubuntu-latest`), requires no new dependency, and adds a few seconds of subprocess wall time.
+
+Most `self_eval.py` checks verify documentation-completeness — that the suite's
+canonical vocabulary (terminal states, repair-record fields, eval layers +
+metrics) is present in the skill prose — not that a running loop enforces it. The
+runtime/behavioral gate is `python3 -m loop doctor` and the contract's own
+`verify-*` scripts, which is why both appear in the list above.
+
 ## Start here — the contributor funnel
 
 Every open starter issue names **the gate that proves the fix** — a
@@ -53,7 +63,10 @@ Loop-Engineer-conformant contract v1. Drafts for the seeded issues live in
 
 ## Authoring or editing a skill
 
-The `self_eval.py` checks encode hard rules — match them or the gate fails:
+The `self_eval.py` checks encode hard rules — match them or the gate fails. Most
+are documentation-completeness checks (the canonical vocabulary must appear in the
+skill prose), not behavioral enforcement of a running loop — that gate is `loop
+doctor` and the contract's own `verify-*` scripts:
 
 - **Frontmatter** must have `name:` and `description:`. The directory name **must equal**
   the frontmatter `name`. Keep the `description` a *quoted* YAML scalar (the suite quotes

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: loop-engineer
-Version: 0.8.0
+Version: 0.10.0
 Summary: Portable Loop Contract Core: validate and inspect repo-native operating contracts for agent loops.
 Project-URL: Homepage, https://github.com/SollanSystems/loop-engineer
 Project-URL: Repository, https://github.com/SollanSystems/loop-engineer
@@ -29,6 +29,8 @@ License: MIT License
 License-File: LICENSE
 Keywords: agent,agentic,claude-code,eval,harness,loop,orchestration,repair,self-improvement,verification
 Requires-Python: >=3.10
+Provides-Extra: dev
+Requires-Dist: hypothesis>=6; extra == 'dev'
 Provides-Extra: schemas
 Requires-Dist: jsonschema>=4; extra == 'schemas'
 Provides-Extra: yaml
@@ -42,7 +44,7 @@ Description-Content-Type: text/markdown
 [![CI](https://github.com/SollanSystems/loop-engineer/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/SollanSystems/loop-engineer/actions/workflows/ci.yml)
 [![Python 3.10–3.12](https://img.shields.io/badge/python-3.10%E2%80%933.12-blue)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
-[![Release](https://img.shields.io/badge/release-0.8.0-blue)](https://github.com/SollanSystems/loop-engineer/tags)
+[![Release](https://img.shields.io/badge/release-0.10.0-blue)](https://github.com/SollanSystems/loop-engineer/tags)
 
 Long-running agents commit **false completion**. After context compaction they
 forget what "done" meant, optimize to the visible test, patch in circles, and
@@ -57,7 +59,15 @@ ships, on disk and runnable today:
 - a **held-out gate** and an **anti-cheat scan** built to catch a loop gaming its
   own verifier;
 - a runnable example whose `false_completion: false` is backed by a committed,
-  real gate verdict — `.loop/artifacts/holdout-verdict.json`, not a hand-set flag.
+  real gate verdict — `.loop/artifacts/holdout-verdict.json`, not a hand-set flag;
+- an **event-sourced runtime** — `run`, `status`, `replay`, `simulate`, and
+  approve/pause/resume/cancel over an append-only SQLite event log
+  (`.loop/events.db`), folded by a deterministic reducer that enforces the same
+  completion gate as the writers, with crash-safe single-step resume. Events are
+  hash-chained; `loop doctor --expect-chain-head` verifies the log against an
+  externally anchored head. The chain is tamper-evident **relative to an
+  anchor** — an adversary with workspace write access can rewrite an unanchored
+  log.
 
 ![The inspector scores a self-asserted DIY loop 0/weak, then the gate-backed example 90/strong — both runs live](docs/demo.gif)
 
@@ -161,6 +171,7 @@ directory, and need no agent runtime to run.
 {
   "ok": true,
   "validation_mode": "structural-fallback",
+  "requested_mode": "auto",
   "schemas_checked": [
     "loop-engineer/manifest@1",
     "loop-engineer/state@1",
@@ -176,6 +187,15 @@ default, or real JSON-Schema validation against `schemas/*.json` when the
 optional `jsonschema` dependency is present (`pip install -e ".[schemas]"`), in
 which case it reads `"jsonschema"`.
 
+For `doctor`, `validate`, and `verify`, `--mode basic|strict|release` makes the
+choice explicit. With no flag, the current auto-detect behavior is unchanged
+for backward compatibility with existing foreign and scoreboard callers.
+`--mode basic` always uses the structural fallback, regardless of whether
+`jsonschema` happens to be installed. `--mode strict` and `--mode release`
+require real JSON-Schema validation and fail non-zero rather than silently
+downgrade if the `jsonschema` extra is missing. `release` currently has the
+same behavior as `strict`; it is reserved for a stricter future policy.
+
 `inspect` is a static contract linter: it scores the loop contract's structure —
 what proof machinery is present and what is missing — without running the loop:
 
@@ -253,7 +273,7 @@ terminal outcome:
   .loop/
     manifest.yaml        # contract metadata
     state.json           # live FSM cursor
-    terminal_state.json  # final exit record; written once — emit refuses overwrite without force=True
+    terminal_state.json  # final exit record; immutable once written
     artifacts/           # evidence bundles and intermediate outputs
     approvals/           # approval requests and resolutions
     checkpoints/         # recoverable snapshots
@@ -307,6 +327,12 @@ The portable core lives in `loop/` and validates schema-bearing artifacts in
 - `loop-engineer/state@1`
 - `loop-engineer/tasks@1`
 - `loop-engineer/terminal@1`
+- `loop-engineer/receipt@1`
+- `loop-engineer/repair@1`
+- `loop-engineer/rollout@1`
+- `loop-engineer/plan@1`
+- `loop-engineer/event@1`
+- `loop-engineer/evidence@1`
 
 ### Claude Code plugin
 
@@ -338,13 +364,14 @@ otherwise, the stop is blocked with the exact doctor issues. No-op without
 **Any Python runtime** — `loop.emit` is a pure-stdlib writer for foreign
 orchestrators (LangGraph, or anything that can call four functions):
 `open_contract`, `append_iteration`, `append_receipt`, `terminate`. The writer
-refuses an evidence-free `Succeeded` at write time. Recipe:
+refuses `Succeeded` unless every declared criterion is true and evidence is
+present. Recipe:
 [docs/integrations/langgraph.md](docs/integrations/langgraph.md).
 
 **CI** — one workflow step validates the contract and publishes a scorecard:
 
 ```yaml
-- uses: SollanSystems/loop-engineer@v0.8.0
+- uses: SollanSystems/loop-engineer@v0.10.0
   with:
     path: "."
 ```
@@ -426,16 +453,19 @@ claude plugin validate --strict .claude-plugin/plugin.json
 ```
 
 The structural self-eval checks skill presence, frontmatter, cross-links,
-terminal-state coverage, repair-record fields, eval metrics, templates, secret
-patterns, dispatch examples, the bring-your-own-verifier default, the MIT
-license, and README differentiation.
+templates, secret patterns, dispatch examples, the bring-your-own-verifier
+default, the MIT license, and README differentiation. Three further checks are
+documentation-completeness scans: they confirm the canonical vocabulary for
+terminal-state coverage, repair-record fields, and eval metrics is present in the
+skill prose — not that a running loop enforces it (that runtime gate is `loop
+doctor` and the contract's own `verify-*` scripts).
 
 ---
 
 ## Status
 
-- Version: `0.8.0`
-- Release tag: `v0.8.0` (PyPI publish trigger; plugin tags through 0.6.0 used `loop-engineer--v<version>`)
+- Version: `0.10.0`
+- Release tag: `v0.10.0` (PyPI publish trigger; plugin tags through 0.6.0 used `loop-engineer--v<version>`)
 - License: MIT
 - Primary interface: Claude Code plugin
 - Portable core: Python CLI + JSON schemas

{loop_engineer-0.8.0 → loop_engineer-0.10.0}/README.md

@@ -5,7 +5,7 @@
 [![CI](https://github.com/SollanSystems/loop-engineer/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/SollanSystems/loop-engineer/actions/workflows/ci.yml)
 [![Python 3.10–3.12](https://img.shields.io/badge/python-3.10%E2%80%933.12-blue)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
-[![Release](https://img.shields.io/badge/release-0.8.0-blue)](https://github.com/SollanSystems/loop-engineer/tags)
+[![Release](https://img.shields.io/badge/release-0.10.0-blue)](https://github.com/SollanSystems/loop-engineer/tags)
 
 Long-running agents commit **false completion**. After context compaction they
 forget what "done" meant, optimize to the visible test, patch in circles, and
@@ -20,7 +20,15 @@ ships, on disk and runnable today:
 - a **held-out gate** and an **anti-cheat scan** built to catch a loop gaming its
   own verifier;
 - a runnable example whose `false_completion: false` is backed by a committed,
-  real gate verdict — `.loop/artifacts/holdout-verdict.json`, not a hand-set flag.
+  real gate verdict — `.loop/artifacts/holdout-verdict.json`, not a hand-set flag;
+- an **event-sourced runtime** — `run`, `status`, `replay`, `simulate`, and
+  approve/pause/resume/cancel over an append-only SQLite event log
+  (`.loop/events.db`), folded by a deterministic reducer that enforces the same
+  completion gate as the writers, with crash-safe single-step resume. Events are
+  hash-chained; `loop doctor --expect-chain-head` verifies the log against an
+  externally anchored head. The chain is tamper-evident **relative to an
+  anchor** — an adversary with workspace write access can rewrite an unanchored
+  log.
 
 ![The inspector scores a self-asserted DIY loop 0/weak, then the gate-backed example 90/strong — both runs live](docs/demo.gif)
 
@@ -124,6 +132,7 @@ directory, and need no agent runtime to run.
 {
   "ok": true,
   "validation_mode": "structural-fallback",
+  "requested_mode": "auto",
   "schemas_checked": [
     "loop-engineer/manifest@1",
     "loop-engineer/state@1",
@@ -139,6 +148,15 @@ default, or real JSON-Schema validation against `schemas/*.json` when the
 optional `jsonschema` dependency is present (`pip install -e ".[schemas]"`), in
 which case it reads `"jsonschema"`.
 
+For `doctor`, `validate`, and `verify`, `--mode basic|strict|release` makes the
+choice explicit. With no flag, the current auto-detect behavior is unchanged
+for backward compatibility with existing foreign and scoreboard callers.
+`--mode basic` always uses the structural fallback, regardless of whether
+`jsonschema` happens to be installed. `--mode strict` and `--mode release`
+require real JSON-Schema validation and fail non-zero rather than silently
+downgrade if the `jsonschema` extra is missing. `release` currently has the
+same behavior as `strict`; it is reserved for a stricter future policy.
+
 `inspect` is a static contract linter: it scores the loop contract's structure —
 what proof machinery is present and what is missing — without running the loop:
 
@@ -216,7 +234,7 @@ terminal outcome:
   .loop/
     manifest.yaml        # contract metadata
     state.json           # live FSM cursor
-    terminal_state.json  # final exit record; written once — emit refuses overwrite without force=True
+    terminal_state.json  # final exit record; immutable once written
     artifacts/           # evidence bundles and intermediate outputs
     approvals/           # approval requests and resolutions
     checkpoints/         # recoverable snapshots
@@ -270,6 +288,12 @@ The portable core lives in `loop/` and validates schema-bearing artifacts in
 - `loop-engineer/state@1`
 - `loop-engineer/tasks@1`
 - `loop-engineer/terminal@1`
+- `loop-engineer/receipt@1`
+- `loop-engineer/repair@1`
+- `loop-engineer/rollout@1`
+- `loop-engineer/plan@1`
+- `loop-engineer/event@1`
+- `loop-engineer/evidence@1`
 
 ### Claude Code plugin
 
@@ -301,13 +325,14 @@ otherwise, the stop is blocked with the exact doctor issues. No-op without
 **Any Python runtime** — `loop.emit` is a pure-stdlib writer for foreign
 orchestrators (LangGraph, or anything that can call four functions):
 `open_contract`, `append_iteration`, `append_receipt`, `terminate`. The writer
-refuses an evidence-free `Succeeded` at write time. Recipe:
+refuses `Succeeded` unless every declared criterion is true and evidence is
+present. Recipe:
 [docs/integrations/langgraph.md](docs/integrations/langgraph.md).
 
 **CI** — one workflow step validates the contract and publishes a scorecard:
 
 ```yaml
-- uses: SollanSystems/loop-engineer@v0.8.0
+- uses: SollanSystems/loop-engineer@v0.10.0
   with:
     path: "."
 ```
@@ -389,16 +414,19 @@ claude plugin validate --strict .claude-plugin/plugin.json
 ```
 
 The structural self-eval checks skill presence, frontmatter, cross-links,
-terminal-state coverage, repair-record fields, eval metrics, templates, secret
-patterns, dispatch examples, the bring-your-own-verifier default, the MIT
-license, and README differentiation.
+templates, secret patterns, dispatch examples, the bring-your-own-verifier
+default, the MIT license, and README differentiation. Three further checks are
+documentation-completeness scans: they confirm the canonical vocabulary for
+terminal-state coverage, repair-record fields, and eval metrics is present in the
+skill prose — not that a running loop enforces it (that runtime gate is `loop
+doctor` and the contract's own `verify-*` scripts).
 
 ---
 
 ## Status
 
-- Version: `0.8.0`
-- Release tag: `v0.8.0` (PyPI publish trigger; plugin tags through 0.6.0 used `loop-engineer--v<version>`)
+- Version: `0.10.0`
+- Release tag: `v0.10.0` (PyPI publish trigger; plugin tags through 0.6.0 used `loop-engineer--v<version>`)
 - License: MIT
 - Primary interface: Claude Code plugin
 - Portable core: Python CLI + JSON schemas