Project Context (AEGIS)

Current skill: 08a | Environment: L1 | Ship profile: production pipeline: 00a -> 00b -> 00d -> 01a -> 01b -> 01c -> 02a -> 02b -> 02c -> 03a -> 03b -> 04a -> 04b -> 04c -> 05a -> 05b -> 05c -> 05d -> 05e -> 06b -> 07a -> 07b -> 07c -> 08a -> 08b -> 08c (+19 --reason rollback edges; source: .aegis/transitions.json)

Rules: read brain/context-window.md before any edit; state changes only via aegis CLI; sacred gates are CLI-enforced.

Context Window

Active release

v0.10 is released; v0.11 "Reach" is the active release (the owner authorized the full fix plan and then v0.11). Aegis remains the only orchestrator; model routing and automatic effort/model selection are deferred.

• v0.11 contract: docs/releases/v0.11/RELEASE-CONTRACT.md; execution matrix docs/releases/v0.11/PLAN.md; revised forward plan docs/ROADMAP.md (v0.11 [ACTIVE]).
• v0.10 release records: contract docs/releases/v0.10/RELEASE-CONTRACT.md; discovery/craft docs/releases/v0.10/DISCOVERY-AND-CRAFT.md; distribution (built .tgz, consumer shrinkwrap, bundled runtime) verified by node scripts/package-check.mjs.
• Current acceptance definitions: GATES.md; observations and final status must be backed by fresh command output and exact-source CI/release assets.

Never reuse v0.9 G4 as v0.10 approval (nor v0.10's for v0.11). The human approves the exact final source commit; active lanes must close safely. Keep the original audit and failed-run observations; append successors rather than rewriting them.

Current handover (2026-10-18)

• v0.10.0 released (2026-10-16): tag v0.10.0 = source 43ab0bd, green exact-commit CI, full ritual CLEARED, offline install verified, human G4 recorded; details in docs/releases/v0.10/HANDOVER.md.
• v0.11 in flight: contracts PR a1c1933; W1-A R1 strict-profile 3773ef2; W1-B R2 host-capabilities 84ddeb5 (claude-code / opencode / cursor declarations - all fixture-only until real versioned-host smokes are recorded - plus the declarationProblems validator; acceptance/review evidence docs/releases/v0.11/host-capabilities-quality.json).
• W2 complete: W2-A R3a claude-code adapter bdcce95 (managed block in .claude/settings.json - exact-block identity, lstat link refusal, named backup before the first change, model/provider/effort byte-identity, minimal-diff uninstall; host install|uninstall|verify wiring; Windows install form is shell form (aegis status) because the PATH aegis is a script shim Claude Code cannot exec-spawn; real claude 2.1.269 SessionStart smoke recorded - claude-code is verified in src/hosts/declarations.ts; evidence docs/releases/v0.11/claude-code-adapter-quality.json). W2-B R4 evidence-publisher aa601fc (evidence export --file <json> --battery <json> publishes schema v2 release evidence: exact-sha binding, CI linkage, observations, verified artifact bytes, limitations; create-only; refusals for missing/stale bindings, private paths, credentials, raw prompt blobs and reported-cost-as-billing; the bare v1 aggregate export is kept for its pinned consumers; evidence docs/releases/v0.11/evidence-publisher-quality.json).
• W3 complete: W3-A R3b opencode adapter merged at c510582 (evidence docs/releases/v0.11/opencode-adapter-quality.json; lane closed, tree clean). W3-B R6 craft pin review + adverse-scenario suite merged at 4500e28 (main = origin/main): stray or duplicated AEGIS markers now refuse sync (exit 9) before anything is written, with both generated targets merged first and written atomically; gc clears interrupted-write temp litter; doctor labels missing git and stays machine-parseable JSON; init refuses without git before touching state, probes before the wipe and preserves owner perf/monitor artifacts; validate reports UNMEASURED naming a missing runner, and an empty dist no longer satisfies perf budgets; resume refuses exit 6 on corrupt checkpoints or integrity inputs. Craft decision: KEEP the v6.4.2 pin - upstream v7.0.0 reviewed (three of six blob IDs move) and recorded in docs/releases/v0.11/craft-pin-review.md; the v7 brainstorming rebuild adds subagent-dispatch/mandatory-plan/spike/visual-companion surface that needs new collision rules and exercises before any bump; the lock is unchanged. 12-case trigger fixture test/fixtures/craft-triggers.json (6 positive to native fallbacks, 6 negative) is consumed by the suite; live trigger precision is UNMEASURED (owner-run, needs a real judgment backend). Evidence docs/releases/v0.11/adverse-scenarios-quality.json; battery at tip 379/379 tests, audit 154/0, pilot 44/44, dogfood 72/0, self-cycle 61/61; tdd RED 6ce2196 -> GREEN 4500e28; merge oracle PASSED (base c510582).
• W4-A complete: R3c cursor adapter merged at 5e9a4e4 (main = origin/main; evidence docs/releases/v0.11/cursor-adapter-quality.json; lane closed, tree clean). .cursor/hooks.json gets exactly one managed entry (only command, holding the declaration's shell string; version 1 on fresh files only; structural identity - stray/duplicated aegis-shaped entries refuse exit 4, links and ambiguity refuse before any write, and the S1 tripwire restores the file if anything foreign moved); stale "adapterless cursor" assertions in the claude-code/opencode suites were retired (no shipped host is adapterless now); the advertised scope stays fixture-only (cursor is absent locally - no smoke was recorded). Battery at the implementation tip: 391/391 tests, audit 154/0, pilot 44/44, dogfood 72/0, self-cycle 61/61; tdd RED 5b5948a -> GREEN 5e9a4e4; merge oracle PASSED (base 2ad6aa1).
• W4-B prepared, NOT RUN: R5 executor trial freeze docs/releases/v0.11/r5-executor-trial.md + scaffold docs/releases/v0.11/r5-trial-setup.mjs (walk verified all-OK to 04a under the strict profile, SETUP-EXIT=0; executor-phase mechanics exercised scripted end-to-end in a disposable scratch - RED/GREEN, acceptance 3/3, review, merge oracle, ff-merge, lane close, 04b/04c, checkpoint/resume VERIFIED - a mechanics dry-run, explicitly NOT R5 evidence). BLOCKED on the owner: executor choice + spend cap, or an explicit ship-without-R5 decision in the G4 verdict. Frozen feature greet(name); assertions A1-A9; evidence bundle target docs/releases/v0.11/r5-executor-trial-evidence/.
• W4 post-merge audit + 04b/04c integration (2026-10-18): deep audit of the v0.11 surface found no implementation bugs - src/adapters/cursor.ts is family-consistent with the claude-code adapter on refusals, serialization and the S1 tripwire (BOM files refuse honestly rather than being silently rewritten; the post-write compare is semantic), and the Cursor declaration was re-verified against the live official docs (.cursor/hooks.json, version: 1, command shell string, project-root cwd, stdin JSON, cloud sessionStart deferral - all as declared). Fresh validations at tip: eval 71/71 (judge SKIPPED, honest), contracts PASS, typecheck PASS, validate tests PASS (391 tests via the CLI, duration_ms 266828.4), validate perf PASS (JS bundle 388kb vs 450kb budget), Node-bundled npm audit --audit-level=high -> 0 vulnerabilities (the contract's prescribed method; aegis validate deps itself honestly stays UNMEASURED here - PATH npm 12.2.0 cannot audit npm-shrinkwrap.json, v0.10 HANDOVER §4), package-check VERIFIED (0.10.0 identity, 10 runtime packages, SHA256 179ba176...) once the tree went fully clean. Audit fixes: brain/quality/validation-perf.md tracked (it was the only untracked member of its generated family - that untracked file had been blocking package verification), deps/tests views refreshed, brain/quality/known-issues.md items 3-5 refreshed with dated citations. Doubt-gate log (reconcile classes): merge-check invocation fidelity - R3a/R3b/R6/R3c merge checks ran without the literal --require-proof --require-quality flags while quality_profile=strict enforced both gates by code (src/commands/merge.ts ORs the flags with strict) - recorded trade-off, the literal flag form is the documented invocation and the R5 runbook uses it; BOM/mixed-indent edge behaviors - family-consistent honest refusals, noise; no contract discrepancies. Pipeline: state 04c - 04b merge obligations complete (all six slice merges each cite their oracle PASS; ast build 59 modules, no cycles; checkpoint cp-1792327021793), 04c integration validations cited above. 05a is held for the owner at the SACRED G3 boundary: G3 is recorded cycle-wide (2026-10-13, by human-token) and the CLI accepts it, but the owner should re-confirm it on the integrated evidence or explicitly stand on the cycle-wide record before the validation phase finalizes - and the release candidate is not final while R5 is open; the exact-final-commit ritual re-runs everything at the candidate anyway.
• Open decisions: R3c cursor advertised scope confirmation (fixture-only operative default; "test elsewhere" / "drop from advertised set" need the owner's recorded say-so), the R5 inputs above (executor + spend cap, or an explicit ship-without-R5 decision in the G4 verdict). Smoke baselines: claude 2.1.269, aegis 0.10.0, opencode v2.0.29, cursor absent locally.
• v0.11 needs a fresh human G4 on the exact final source. Published tags never move; post-release repairs already fold into v0.11.

Validation + maintain phases complete; held at 08a (2026-10-18)

The full validation phase (05a-05e), review (06b) and maintain phase (07a-07c) ran to completion at 1a42a73, and the ship verdict is recorded. State: 08a. Verdict: NO-GO pending two owner decisions. Nothing further can be advanced by code work. (Amended 2026-10-19: exact-commit CI then exposed two environment-dependent defects — see the CI section below. Both are fixed and CI is green; the verdict and the two owner decisions are unchanged.)

Artifacts written this phase (all tracked, all evidence-cited): brain/quality/traceability-matrix.md (13 criteria: 12 mapped = 92.3%, gap = R5 only, creep 0%), ux-flaw-report.md, accessibility-audit.md, security-gap-report.md, bug-hunting-report.md, verification-report.md, exploratory-test-report.md, code-review-report.md, refactoring-plan.md, observability.md, documentation-report.md, verdict-report.md, plus docs/HOSTS.md (new user runbook) and docs/releases/v0.11/{acceptance,review}.json (committed quality plans).

Findings and fixes this phase (all verified):

• UX-1 (minor, FIXED): config set <valid-key> with no value said "unknown key '<key>'" while listing that key as valid; bare config set said "unknown key 'undefined'". Fast lane, RED->GREEN, test/config.test.js; suite green.
• CR-1 (major, FIXED): cursor.ts imported pathHits from claude-code.ts - the only cross-adapter dependency. Moved to src/lib/host-primitives.ts; test/adapter-independence.test.js pins the rule (RED: cursor.ts -> claude-code.ts; GREEN after; 33/33 adapter tests).
• CR-2 (minor, PLANNED not executed): 12 duplicated helpers / 123 identical lines across adapters. Carried to the next cycle as the single refactor type (07a allows one per cycle; the duplicated helpers are the security-relevant write path and need human review). Plan + protocol in refactoring-plan.md.
• D-1/D-2/D-3 (docs, FIXED): README's host row was stale ("installs unlock per host slice"); AGENTS.md omitted the shipped aegis host command entirely; and v0.11's headline capability had no user runbook. Added docs/HOSTS.md with real captured output.

Gate results at 1a42a73: tests 391/391 (skipped 0), eval 71/71 (judge SKIPPED), contracts PASS, typecheck PASS, audit 154/0, pilot 44/44, dogfood 72/0, self-cycle 61/61, Node-bundled npm audit 0 vulnerabilities, package VERIFIED (0.10.0, 10 runtime packages, SHA256 3ee37bf1...). Quality evidence: acceptance 8/8 PASS; review recorded with no open blocker/major.

Two gate lessons recorded (both fixed, not worked around):

1. A review finding is not a release-gate condition. R5 was first recorded as a code-review blocker, which made quality review refuse exit 9 (open major:CR-4). R5 has no code to review - it is contract must-pass M4 - so it was reclassified out of the review and into the verdict. The refusal was correct; the classification was wrong.
2. An acceptance criterion must be a pure observer. aegis validate perf rewrites brain/quality/validation-perf.md, so the capture failed exit 9 quality snapshot changed during capture. AC4 is now the read-only typecheck; the perf budget is recorded separately.

Owner decisions required (in order):

1. R5: name an executor + spend cap and run the frozen trial (scaffold verified at %TEMP%\aegis-r5-setup-KJG6Cv), or explicitly record "ship without R5" in the G4 verdict. The agent may not infer this.
2. G4: approve on the exact final candidate commit once R5 is settled. The v0.10 G4 (43ab0bd) does not carry.
3. Still open, non-blocking: R3c cursor advertised scope (currently fixture-only, which is honest).

The cycle guard now sits at state 08a visited 2x (max 3). A third entry is allowed; a fourth would refuse exit 5 and require an audited aegis loops reset --reason after human review - plan the next cycle entry with that in mind.

G3 provenance note is now closed by use: the validation phase ran on the cycle-wide G3 record (2026-10-13, by human-token). If the owner prefers a fresh G3 on the integrated evidence, say so before the release ritual.

Exact-commit CI was red; two defects fixed (2026-10-19)

The first exact-commit CI runs in this cycle failed the test job on all three runners at 59f1f52 and b9c7a67, while the same suite passed locally. Both causes were deterministic environment differences, not flakes:

• B-4 (Major, FIXED at c7f8870): aegis doctor appended drift/attention notes (and the --save/prune confirmations) to stdout after the JSON report, so JSON.parse(stdout) failed whenever a note existed. A developer machine has the skill stores and no note fires; a fresh runner is missing 19 routed blades. Advisory lines now go to stderr; the slice-at-\n} workaround in test/audit-packaging.test.js was removed. This restores v0.11 R6's own "doctor stays machine-parseable JSON" claim.
• B-5 (Minor, FIXED at c7f8870): test/pm-detect.test.js asserted status !== 'UNMEASURED', which encodes "pnpm/yarn are installed"; the runner-less UNMEASURED with the cause named is the documented honest outcome. The assertion now accepts PASS/FAIL/UNMEASURED and requires the cause when UNMEASURED.

Verification: gh run view 39238554395 at c7f8870 -> windows-latest # tests 395, # pass 395, # fail 0, # skipped 0; ubuntu-latest `# tests 395,

pass 393, # fail 0, # skipped 2` (the two OS symlink-privilege guards).

Local aegis validate tests PASS (skipped 0, todo 0). A new acceptance observer AC9 pins the doctor stdout contract; the acceptance plan now cites 395 tests.

Lesson 3 recorded: a locally green suite is not evidence about CI. A test that depends on an installed tool, a home-directory skill store, or a package manager must either force the condition it claims to test (the new doctor regression points AEGIS_SKILL_STORES at impossible paths) or accept the honest degraded outcome (package-manager detection). Both CI failures were invisible to 391 local passes.

State is unchanged: 08a, verdict NO-GO, the same two owner decisions (R5, G4). Quality receipts must be recaptured at the final tip after this docs commit - any commit stales them.