﻿2026-06-05T02:56:35.8677769Z ##[group]Run ./traceable-reqs lint || true
2026-06-05T02:56:35.8678255Z [36;1m./traceable-reqs lint || true[0m
2026-06-05T02:56:35.8699537Z shell: /usr/bin/bash -e {0}
2026-06-05T02:56:35.8699844Z ##[endgroup]
2026-06-05T02:56:35.8951009Z Requirement quality findings (24); 135 requirements queued for agent review:
2026-06-05T02:56:35.8954179Z   [must] requirement_quality REQ-API-1 criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8955589Z   [must] requirement_quality REQ-CONSENT-1 criterion=length — title is 41 words; want 3..=25
2026-06-05T02:56:35.8957011Z   [must] requirement_quality REQ-CONSENT-2 criterion=length — title is 37 words; want 3..=25
2026-06-05T02:56:35.8958926Z   [must] requirement_quality REQ-HAZARD-CONFLICT-BOTH-PRESERVED criterion=length — title is 29 words; want 3..=25
2026-06-05T02:56:35.8960697Z   [must] requirement_quality REQ-HAZARD-DAEMON-SCHED-NONBLOCKING criterion=length — title is 32 words; want 3..=25
2026-06-05T02:56:35.8962335Z   [must] requirement_quality REQ-HAZARD-DETACHED-PIPE-INHERIT criterion=length — title is 52 words; want 3..=25
2026-06-05T02:56:35.8964379Z   [must] requirement_quality REQ-HAZARD-ENVELOPE-PARSER-SAFE criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8966301Z   [must] requirement_quality REQ-HAZARD-GEN-START-NOW criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8967634Z   [must] requirement_quality REQ-HAZARD-PAIR-RATE-LIMIT criterion=length — title is 37 words; want 3..=25
2026-06-05T02:56:35.8969033Z   [must] requirement_quality REQ-HAZARD-PAIR-SEED-ROTATION criterion=length — title is 33 words; want 3..=25
2026-06-05T02:56:35.8971094Z   [must] requirement_quality REQ-HAZARD-PAIR-TRANSCRIPT-BIND criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8973064Z   [must] requirement_quality REQ-HAZARD-PSYCHE-OUTBOUND-PROXY criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8974535Z   [must] requirement_quality REQ-HAZARD-PSYCHE-OUTBOUND-PROXY criterion=length — title is 27 words; want 3..=25
2026-06-05T02:56:35.8975826Z   [must] requirement_quality REQ-HAZARD-WAN-ORIGIN-AUTH criterion=length — title is 37 words; want 3..=25
2026-06-05T02:56:35.8976891Z   [must] requirement_quality REQ-INST-15 criterion=length — title is 32 words; want 3..=25
2026-06-05T02:56:35.8977980Z   [must] requirement_quality REQ-INSTALL-2 criterion=length — title is 2 word(s); want 3..=25
2026-06-05T02:56:35.8980066Z   [must] requirement_quality REQ-MANIFEST-1 criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8981788Z   [must] requirement_quality REQ-MIGRATE-1 criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8983374Z   [must] requirement_quality REQ-PRES-1 criterion=contains-and — title contains ' and ' — may smuggle multiple capabilities
2026-06-05T02:56:35.8984456Z   [must] requirement_quality REQ-PRES-1 criterion=length — title is 48 words; want 3..=25
2026-06-05T02:56:35.8985564Z   [must] requirement_quality REQ-SEAM-SPAWN criterion=length — title is 2 word(s); want 3..=25
2026-06-05T02:56:35.8986962Z   [must] requirement_quality REQ-SHELL-1 criterion=length — title is 36 words; want 3..=25
2026-06-05T02:56:35.8988329Z   [must] requirement_quality REQ-SHELL-2 criterion=length — title is 49 words; want 3..=25
2026-06-05T02:56:35.8990179Z   [must] requirement_quality REQ-STORE-1 criterion=length — title is 34 words; want 3..=25
2026-06-05T02:56:35.8990220Z 
2026-06-05T02:56:35.8990577Z # Requirement quality review
2026-06-05T02:56:35.8990595Z 
2026-06-05T02:56:35.8991537Z You are reviewing 135 requirement(s) from `traceable-reqs.toml` against a quality
2026-06-05T02:56:35.8992470Z rubric. Deterministic checks (length, contains-and, tbd-todo, duplicate-titles,
2026-06-05T02:56:35.8993396Z trailing-etc) have already run and surfaced as `requirement_quality` findings on
2026-06-05T02:56:35.8994570Z this command's output. Your task is the rubric items below.
2026-06-05T02:56:35.8994590Z 
2026-06-05T02:56:35.8994846Z ## Rubric
2026-06-05T02:56:35.8994862Z 
2026-06-05T02:56:35.8996049Z - **singular** — describes one capability; no smuggled "and"/"or" across distinct actions.
2026-06-05T02:56:35.8997233Z - **verifiable** — states an observable behavior a test or reviewer could confirm.
2026-06-05T02:56:35.8998103Z - **atomic** — cannot be split into two requirements without losing meaning.
2026-06-05T02:56:35.8998630Z - **active-voice** — clear subject and active verb.
2026-06-05T02:56:35.8998650Z 
2026-06-05T02:56:35.8999680Z If a criterion is borderline or doesn't apply, abstain — only emit findings for
2026-06-05T02:56:35.8999970Z clear concerns.
2026-06-05T02:56:35.8999990Z 
2026-06-05T02:56:35.9000266Z ## Requirements
2026-06-05T02:56:35.9000281Z 
2026-06-05T02:56:35.9010813Z ### REQ-ARCH-1
2026-06-05T02:56:35.9011493Z - Title: Many small acyclically-layered crates
2026-06-05T02:56:35.9011817Z - Required stages: impl
2026-06-05T02:56:35.9011835Z 
2026-06-05T02:56:35.9012098Z ### REQ-ARCH-2
2026-06-05T02:56:35.9012708Z - Title: Public SDK surface is spt-proto, spt-runtime, spt-msg
2026-06-05T02:56:35.9013000Z - Required stages: impl
2026-06-05T02:56:35.9013030Z 
2026-06-05T02:56:35.9013288Z ### REQ-ARCH-3
2026-06-05T02:56:35.9014219Z - Title: Wire-protocol version independent of crate semver, N-1 compat window
2026-06-05T02:56:35.9014539Z - Required stages: impl, unit
2026-06-05T02:56:35.9014555Z 
2026-06-05T02:56:35.9014803Z ### REQ-ARCH-4
2026-06-05T02:56:35.9015524Z - Title: Copy-verbatim the commodity layer from the sister project
2026-06-05T02:56:35.9015842Z - Required stages: impl, unit
2026-06-05T02:56:35.9015858Z 
2026-06-05T02:56:35.9016114Z ### REQ-DAEMON-1
2026-06-05T02:56:35.9016786Z - Title: One per-machine spt-daemon owning all per-machine state
2026-06-05T02:56:35.9017109Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9017132Z 
2026-06-05T02:56:35.9017396Z ### REQ-DAEMON-2
2026-06-05T02:56:35.9017893Z - Title: Broker/brain split for seamless self-update
2026-06-05T02:56:35.9018221Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9018237Z 
2026-06-05T02:56:35.9018497Z ### REQ-DAEMON-3
2026-06-05T02:56:35.9019104Z - Title: Any api invocation auto-starts the daemon if absent
2026-06-05T02:56:35.9019501Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9019520Z 
2026-06-05T02:56:35.9019783Z ### REQ-DAEMON-4
2026-06-05T02:56:35.9020172Z - Title: Honor every KNOWN-HAZARDS invariant
2026-06-05T02:56:35.9020504Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9020518Z 
2026-06-05T02:56:35.9020768Z ### REQ-STORE-1
2026-06-05T02:56:35.9026532Z - Title: spt-store::BranchStore (git branch as versioned KV; commit=checkpoint/tip=resume, atomic multi-key, merge-native sync) is the substrate for coarse/durable/audited state (context, registry snapshot+distribution, daemon checkpoint); hot paths (B5 fsync journal) + indexed queries (SQLite spool) excluded (ADR-0011)
2026-06-05T02:56:35.9026872Z - Required stages: impl, unit
2026-06-05T02:56:35.9026888Z 
2026-06-05T02:56:35.9027157Z ### REQ-MANIFEST-1
2026-06-05T02:56:35.9027989Z - Title: Per-adapter manifest with adapter_name and min_spt_core_version
2026-06-05T02:56:35.9028326Z - Required stages: doc, impl, unit
2026-06-05T02:56:35.9028342Z 
2026-06-05T02:56:35.9028627Z ### REQ-SEAM-SPAWN
2026-06-05T02:56:35.9028943Z - Title: spawn-session seam
2026-06-05T02:56:35.9029291Z - Required stages: impl, unit
2026-06-05T02:56:35.9029308Z 
2026-06-05T02:56:35.9029618Z ### REQ-SEAM-POSTSPAWN
2026-06-05T02:56:35.9030217Z - Title: post-spawn / api bind seam with boot nonce
2026-06-05T02:56:35.9030527Z - Required stages: impl, unit
2026-06-05T02:56:35.9030543Z 
2026-06-05T02:56:35.9030816Z ### REQ-SEAM-PSYCHE
2026-06-05T02:56:35.9031294Z - Title: spawn-psyche seam (fresh + resume templates)
2026-06-05T02:56:35.9031616Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9031975Z 
2026-06-05T02:56:35.9032253Z ### REQ-SEAM-HISTORY
2026-06-05T02:56:35.9033022Z - Title: History subsystem (fetcher / locate-normalize / native store)
2026-06-05T02:56:35.9033343Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9033357Z 
2026-06-05T02:56:35.9033629Z ### REQ-SEAM-ACTIVITY
2026-06-05T02:56:35.9034540Z - Title: Activity/idle reported via api sentinels, not PTY quiescence
2026-06-05T02:56:35.9034845Z - Required stages: impl, unit
2026-06-05T02:56:35.9034860Z 
2026-06-05T02:56:35.9035129Z ### REQ-SEAM-INJECT
2026-06-05T02:56:35.9035803Z - Title: inject-input methods configurable per activity-state
2026-06-05T02:56:35.9036280Z - Required stages: impl, unit
2026-06-05T02:56:35.9036299Z 
2026-06-05T02:56:35.9036738Z ### REQ-SEAM-RESUME
2026-06-05T02:56:35.9037499Z - Title: resume-session seam (fresh-with-preload / continue-existing)
2026-06-05T02:56:35.9037807Z - Required stages: impl, unit
2026-06-05T02:56:35.9037821Z 
2026-06-05T02:56:35.9038098Z ### REQ-SEAM-CAPABILITY
2026-06-05T02:56:35.9038657Z - Title: Hostable endpoint-types capability declaration
2026-06-05T02:56:35.9038971Z - Required stages: impl, unit
2026-06-05T02:56:35.9038984Z 
2026-06-05T02:56:35.9039591Z ### REQ-SEAM-UPDATE
2026-06-05T02:56:35.9040324Z - Title: Adapter-update avenue (file-pull / delegated command)
2026-06-05T02:56:35.9040644Z - Required stages: impl, unit
2026-06-05T02:56:35.9040659Z 
2026-06-05T02:56:35.9040920Z ### REQ-API-1
2026-06-05T02:56:35.9041655Z - Title: api prefix and adapter_name on every machinery invocation
2026-06-05T02:56:35.9041974Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9041988Z 
2026-06-05T02:56:35.9042243Z ### REQ-API-2
2026-06-05T02:56:35.9043197Z - Title: The api subcommand surface (bind/listen/poll/state/worker/boundary/...)
2026-06-05T02:56:35.9043534Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9043549Z 
2026-06-05T02:56:35.9043799Z ### REQ-API-3
2026-06-05T02:56:35.9044291Z - Title: commune/signoff are file-drops, not commands
2026-06-05T02:56:35.9044615Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9044641Z 
2026-06-05T02:56:35.9044891Z ### REQ-START-1
2026-06-05T02:56:35.9045758Z - Title: Adapters never resolve SPT_HOME; binary on PATH; api bridging only
2026-06-05T02:56:35.9046072Z - Required stages: impl, unit
2026-06-05T02:56:35.9046086Z 
2026-06-05T02:56:35.9046340Z ### REQ-START-2
2026-06-05T02:56:35.9046842Z - Title: Harness-hosted startup: api seed then listen
2026-06-05T02:56:35.9047155Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9047170Z 
2026-06-05T02:56:35.9047431Z ### REQ-START-3
2026-06-05T02:56:35.9048125Z - Title: spt-hosted startup: spawn-session then api bind (no file)
2026-06-05T02:56:35.9048447Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9048463Z 
2026-06-05T02:56:35.9048715Z ### REQ-START-4
2026-06-05T02:56:35.9049239Z - Title: Adapter-injected env aliases (SPT/OWL/LIVE)
2026-06-05T02:56:35.9049864Z - Required stages: impl, unit
2026-06-05T02:56:35.9049878Z 
2026-06-05T02:56:35.9050116Z ### REQ-EP-1
2026-06-05T02:56:35.9050582Z - Title: Day-one endpoint types; open type system
2026-06-05T02:56:35.9050894Z - Required stages: impl, unit
2026-06-05T02:56:35.9050909Z 
2026-06-05T02:56:35.9051148Z ### REQ-EP-2
2026-06-05T02:56:35.9051833Z - Title: Agent endpoints vs Shells distinction in the type model
2026-06-05T02:56:35.9052148Z - Required stages: impl, unit
2026-06-05T02:56:35.9052162Z 
2026-06-05T02:56:35.9052412Z ### REQ-EP-3
2026-06-05T02:56:35.9053223Z - Title: Messaging payloads carry typed operation commands + file blobs
2026-06-05T02:56:35.9053525Z - Required stages: impl, unit
2026-06-05T02:56:35.9053540Z 
2026-06-05T02:56:35.9053787Z ### REQ-EP-4
2026-06-05T02:56:35.9054332Z - Title: PresenceChannel broker endpoint (seam day-one)
2026-06-05T02:56:35.9054642Z - Required stages: impl, unit
2026-06-05T02:56:35.9054658Z 
2026-06-05T02:56:35.9054907Z ### REQ-EP-5
2026-06-05T02:56:35.9059661Z - Title: Concrete shell instantiation model: spawn-mints-instance (vs relink/online), registered-on-node permission + broadcast-is-discovery, per-shell require_approval gate, max_instances_per_owner + over_cap, instance aliasing, discovery scope
2026-06-05T02:56:35.9060182Z - Required stages: impl, unit
2026-06-05T02:56:35.9060198Z 
2026-06-05T02:56:35.9060447Z ### REQ-INST-1
2026-06-05T02:56:35.9061120Z - Title: endpoint ID vs instance split (adapter-agnostic ID)
2026-06-05T02:56:35.9061556Z - Required stages: 
2026-06-05T02:56:35.9061573Z 
2026-06-05T02:56:35.9061825Z ### REQ-INST-2
2026-06-05T02:56:35.9062219Z - Title: Per-node files, synced Psyche mind
2026-06-05T02:56:35.9062527Z - Required stages: impl, unit
2026-06-05T02:56:35.9062543Z 
2026-06-05T02:56:35.9062796Z ### REQ-INST-3
2026-06-05T02:56:35.9063378Z - Title: Dormant (warm) / suspended (cold) resting states
2026-06-05T02:56:35.9063701Z - Required stages: doc, impl, unit
2026-06-05T02:56:35.9063715Z 
2026-06-05T02:56:35.9063969Z ### REQ-INST-4
2026-06-05T02:56:35.9064748Z - Title: active to dormant/suspended fires a transition echo commune
2026-06-05T02:56:35.9065084Z - Required stages: impl, unit
2026-06-05T02:56:35.9065098Z 
2026-06-05T02:56:35.9065356Z ### REQ-INST-5
2026-06-05T02:56:35.9066134Z - Title: Two-tier context sync (live to all, project to same-project)
2026-06-05T02:56:35.9066467Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9066480Z 
2026-06-05T02:56:35.9066737Z ### REQ-INST-6
2026-06-05T02:56:35.9067612Z - Title: Deferred messages not delivered to dormant/suspended instances
2026-06-05T02:56:35.9067940Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9067964Z 
2026-06-05T02:56:35.9068213Z ### REQ-INST-7
2026-06-05T02:56:35.9068734Z - Title: Subnet registry + bare-id resolution policy
2026-06-05T02:56:35.9069053Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9069069Z 
2026-06-05T02:56:35.9069543Z ### REQ-INST-8
2026-06-05T02:56:35.9070317Z - Title: Remote-control mode distinct from local operation
2026-06-05T02:56:35.9070654Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9070668Z 
2026-06-05T02:56:35.9070922Z ### REQ-INST-9
2026-06-05T02:56:35.9071790Z - Title: Multi-subnet membership (same-user N subnets; cross-user seam)
2026-06-05T02:56:35.9072105Z - Required stages: impl, unit
2026-06-05T02:56:35.9072119Z 
2026-06-05T02:56:35.9072363Z ### REQ-INST-10
2026-06-05T02:56:35.9073396Z - Title: Qualified addressing [subnet:]id[@node] + ambiguity forces qualification
2026-06-05T02:56:35.9073723Z - Required stages: impl, unit
2026-06-05T02:56:35.9073738Z 
2026-06-05T02:56:35.9073981Z ### REQ-INST-11
2026-06-05T02:56:35.9075028Z - Title: spt rename <id> rippled to all instances (collision-checked, 6.5-reconciled)
2026-06-05T02:56:35.9075329Z - Required stages: impl, unit
2026-06-05T02:56:35.9075343Z 
2026-06-05T02:56:35.9075601Z ### REQ-INST-12
2026-06-05T02:56:35.9077266Z - Title: Endpoint visibility per-(endpoint,subnet): excluded semantics, OR-of-defaults + override, gates sync
2026-06-05T02:56:35.9077598Z - Required stages: impl, unit
2026-06-05T02:56:35.9077612Z 
2026-06-05T02:56:35.9077879Z ### REQ-INST-13
2026-06-05T02:56:35.9078732Z - Title: Subnet-exclusive sync + per-endpoint subnet-membership list
2026-06-05T02:56:35.9079066Z - Required stages: impl, unit
2026-06-05T02:56:35.9079081Z 
2026-06-05T02:56:35.9079689Z ### REQ-INST-14
2026-06-05T02:56:35.9082047Z - Title: Resource advertisement (subnet resource registry): free-text blurb, both-authored, registry projection, visibility/whitelist-gated
2026-06-05T02:56:35.9082409Z - Required stages: doc, impl, unit
2026-06-05T02:56:35.9082424Z 
2026-06-05T02:56:35.9082690Z ### REQ-INST-15
2026-06-05T02:56:35.9087615Z - Title: Immutable home subnet (assigned at creation: auto-if-one/ask-if-many) + spt fork (cross-subnet clone to a new identity, copy-then-diverge, not re-home); adapter chosen at creation from registered hostable adapters, changed only via launch/resume-under-new (ADR-0010)
2026-06-05T02:56:35.9087968Z - Required stages: doc, impl, unit
2026-06-05T02:56:35.9087983Z 
2026-06-05T02:56:35.9088252Z ### REQ-REACH-1
2026-06-05T02:56:35.9088836Z - Title: Off-node remote-drive detection + file transfer
2026-06-05T02:56:35.9089381Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9089396Z 
2026-06-05T02:56:35.9090028Z ### REQ-REACH-2
2026-06-05T02:56:35.9090664Z - Title: Remote command execution (deferred, consent-gated)
2026-06-05T02:56:35.9090947Z - Required stages: 
2026-06-05T02:56:35.9091086Z 
2026-06-05T02:56:35.9091369Z ### REQ-MSG-1
2026-06-05T02:56:35.9094158Z - Title: Local message delivery: TCP-first to a registered address, spool fallback when offline; id->address via registry (stale-clean first); reply routing (__REPLY_TO__)
2026-06-05T02:56:35.9094512Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9094529Z 
2026-06-05T02:56:35.9094796Z ### REQ-MSG-2
2026-06-05T02:56:35.9096209Z - Title: spt binary CLI surface: send/ring/ready/poll/list/stop/whoami, stable arg shapes + exit codes
2026-06-05T02:56:35.9096541Z - Required stages: impl, unit
2026-06-05T02:56:35.9096555Z 
2026-06-05T02:56:35.9096816Z ### REQ-MSG-3
2026-06-05T02:56:35.9099106Z - Title: Ready-agent lifecycle: register perch (info.json + listener + registry address) on ready, drain spooled backlog on startup, clean teardown
2026-06-05T02:56:35.9099692Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9099709Z 
2026-06-05T02:56:35.9100170Z ### REQ-NODE-IDENTITY
2026-06-05T02:56:35.9101313Z - Title: Ed25519 identity primitive: keypair, detached sign/verify, stable pubkey<->hex
2026-06-05T02:56:35.9101639Z - Required stages: impl, unit
2026-06-05T02:56:35.9101653Z 
2026-06-05T02:56:35.9101919Z ### REQ-NET-1
2026-06-05T02:56:35.9102746Z - Title: WAN messaging first-class, behind default-on net feature flag
2026-06-05T02:56:35.9103085Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9103102Z 
2026-06-05T02:56:35.9103376Z ### REQ-NET-2
2026-06-05T02:56:35.9104159Z - Title: n0 relay default + self-host knob + plain-language disclosure
2026-06-05T02:56:35.9104491Z - Required stages: impl
2026-06-05T02:56:35.9104506Z 
2026-06-05T02:56:35.9104771Z ### REQ-NET-3
2026-06-05T02:56:35.9105469Z - Title: Cross-node Psyche sync over P2P replaces gh-repo-sync
2026-06-05T02:56:35.9105798Z - Required stages: impl, unit
2026-06-05T02:56:35.9105811Z 
2026-06-05T02:56:35.9106078Z ### REQ-PAIR-1
2026-06-05T02:56:35.9106435Z - Title: TOTP-seeded SPAKE2 pairing
2026-06-05T02:56:35.9106781Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9106803Z 
2026-06-05T02:56:35.9107072Z ### REQ-PAIR-2
2026-06-05T02:56:35.9107592Z - Title: Local trust store with TOFU + warn-on-change
2026-06-05T02:56:35.9107913Z - Required stages: impl, unit
2026-06-05T02:56:35.9107928Z 
2026-06-05T02:56:35.9108204Z ### REQ-PAIR-3
2026-06-05T02:56:35.9108770Z - Title: Fetch current pairing code from any paired node
2026-06-05T02:56:35.9109105Z - Required stages: impl, unit
2026-06-05T02:56:35.9109118Z 
2026-06-05T02:56:35.9109607Z ### REQ-PAIR-4
2026-06-05T02:56:35.9110168Z - Title: Subnet naming on first pairing
2026-06-05T02:56:35.9110501Z - Required stages: impl, unit
2026-06-05T02:56:35.9110517Z 
2026-06-05T02:56:35.9110783Z ### REQ-PAIR-5
2026-06-05T02:56:35.9112477Z - Title: Multi-subnet pairing: subnet-name discovery input, create-new-names-up-front, rendezvous-token hashing
2026-06-05T02:56:35.9112831Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9112847Z 
2026-06-05T02:56:35.9113114Z ### REQ-PAIR-6
2026-06-05T02:56:35.9114500Z - Title: Elevation-gated per-subnet code fetch (UAC/root or elevated agent; else authenticator app)
2026-06-05T02:56:35.9114822Z - Required stages: impl, unit
2026-06-05T02:56:35.9114836Z 
2026-06-05T02:56:35.9115115Z ### REQ-PAIR-7
2026-06-05T02:56:35.9115795Z - Title: Subnet icon (inline image metadata, GUI-only consumer)
2026-06-05T02:56:35.9116082Z - Required stages: 
2026-06-05T02:56:35.9116097Z 
2026-06-05T02:56:35.9116366Z ### REQ-SEC-1
2026-06-05T02:56:35.9118676Z - Title: Per-endpoint access whitelist: origin-node gate, stateful-firewall (reply/outbound exempt), node-now/user-later, outer gate before grants
2026-06-05T02:56:35.9119009Z - Required stages: impl, unit
2026-06-05T02:56:35.9119261Z 
2026-06-05T02:56:35.9119714Z ### REQ-NOTIF-1
2026-06-05T02:56:35.9121998Z - Title: Notification primitive: per-subnet replicated spool, seen/dismissed, resurface-at-boundary, subsumes update+consent prompts
2026-06-05T02:56:35.9122348Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9122363Z 
2026-06-05T02:56:35.9122808Z ### REQ-NOTIF-2
2026-06-05T02:56:35.9124258Z - Title: spt notify (agent-issued subnet notif) + notif_command manifest seam (harness + shell adapters)
2026-06-05T02:56:35.9124604Z - Required stages: doc, impl, unit
2026-06-05T02:56:35.9124619Z 
2026-06-05T02:56:35.9124885Z ### REQ-UPD-1
2026-06-05T02:56:35.9125278Z - Title: Peer-propagated update over P2P
2026-06-05T02:56:35.9125609Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9125624Z 
2026-06-05T02:56:35.9125898Z ### REQ-UPD-2
2026-06-05T02:56:35.9126458Z - Title: All binaries signature-verified before handoff
2026-06-05T02:56:35.9126782Z - Required stages: impl, unit
2026-06-05T02:56:35.9126796Z 
2026-06-05T02:56:35.9127081Z ### REQ-UPD-3
2026-06-05T02:56:35.9127843Z - Title: No endpoint process terminates/suspends during self-update
2026-06-05T02:56:35.9128195Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9128210Z 
2026-06-05T02:56:35.9128479Z ### REQ-UPD-4
2026-06-05T02:56:35.9129337Z - Title: Update gated on user confirmation by default; opt-in full-auto
2026-06-05T02:56:35.9129689Z - Required stages: impl, unit
2026-06-05T02:56:35.9129703Z 
2026-06-05T02:56:35.9129959Z ### REQ-UPD-5
2026-06-05T02:56:35.9130488Z - Title: spt-core ripple-updates registered adapters
2026-06-05T02:56:35.9130825Z - Required stages: impl, unit
2026-06-05T02:56:35.9130839Z 
2026-06-05T02:56:35.9131103Z ### REQ-TERM-1
2026-06-05T02:56:35.9131856Z - Title: Process-supervisor terminal wrapper hosting broker PTYs
2026-06-05T02:56:35.9132177Z - Required stages: impl, unit
2026-06-05T02:56:35.9132191Z 
2026-06-05T02:56:35.9132466Z ### REQ-TERM-2
2026-06-05T02:56:35.9133276Z - Title: session-surface abstraction; send-keys + send-line injection
2026-06-05T02:56:35.9133618Z - Required stages: impl, unit
2026-06-05T02:56:35.9133631Z 
2026-06-05T02:56:35.9133907Z ### REQ-TERM-3
2026-06-05T02:56:35.9134434Z - Title: Byte-stream remote terminal streaming for v1
2026-06-05T02:56:35.9134770Z - Required stages: impl, unit
2026-06-05T02:56:35.9134793Z 
2026-06-05T02:56:35.9135051Z ### REQ-TERM-4
2026-06-05T02:56:35.9137143Z - Title: Live activity buffer (PTY digest): adapter-supplied patterns over broker PTY, spt digest pull + delta-stream, opt-in Path-B log
2026-06-05T02:56:35.9137483Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9137498Z 
2026-06-05T02:56:35.9137764Z ### REQ-FRONT-1
2026-06-05T02:56:35.9138530Z - Title: Day-one launcher/manager frontend (list/launch/attach/init)
2026-06-05T02:56:35.9138812Z - Required stages: 
2026-06-05T02:56:35.9138829Z 
2026-06-05T02:56:35.9139121Z ### REQ-INSTALL-1
2026-06-05T02:56:35.9140056Z - Title: Two install paths; signed one-line script; OS-service registration
2026-06-05T02:56:35.9140343Z - Required stages: 
2026-06-05T02:56:35.9140369Z 
2026-06-05T02:56:35.9140657Z ### REQ-INSTALL-2
2026-06-05T02:56:35.9141179Z - Title: Marketplace-repackaging-friendly install
2026-06-05T02:56:35.9141471Z - Required stages: 
2026-06-05T02:56:35.9141485Z 
2026-06-05T02:56:35.9141765Z ### REQ-INSTALL-3
2026-06-05T02:56:35.9142284Z - Title: Idempotent + interactive-optional first run
2026-06-05T02:56:35.9142583Z - Required stages: 
2026-06-05T02:56:35.9142597Z 
2026-06-05T02:56:35.9142866Z ### REQ-INSTALL-4
2026-06-05T02:56:35.9146892Z - Title: Adapter registration lifecycle: spt adapter add (--github, manifest-first, install-is-first-update) + soft-deregister remove + optional manifest uninstall template; node-local registered-adapter set self-update ripples over
2026-06-05T02:56:35.9147224Z - Required stages: impl, unit
2026-06-05T02:56:35.9147240Z 
2026-06-05T02:56:35.9147511Z ### REQ-MIGRATE-1
2026-06-05T02:56:35.9148261Z - Title: Auto-detect and migrate a legacy claude_skill_owl install
2026-06-05T02:56:35.9148722Z - Required stages: 
2026-06-05T02:56:35.9148737Z 
2026-06-05T02:56:35.9149013Z ### REQ-INFRA-1
2026-06-05T02:56:35.9149884Z - Title: GitHub issue tracking for v1; tangled.org as migration target
2026-06-05T02:56:35.9150177Z - Required stages: 
2026-06-05T02:56:35.9150191Z 
2026-06-05T02:56:35.9150467Z ### REQ-DOCS-1
2026-06-05T02:56:35.9151540Z - Title: Dual-audience docs (human + AI dev-agent), markdown once / two depths
2026-06-05T02:56:35.9151851Z - Required stages: 
2026-06-05T02:56:35.9151871Z 
2026-06-05T02:56:35.9152151Z ### REQ-DOCS-2
2026-06-05T02:56:35.9152827Z - Title: Sub-10-minute runnable killer quickstart per audience
2026-06-05T02:56:35.9153121Z - Required stages: 
2026-06-05T02:56:35.9153134Z 
2026-06-05T02:56:35.9153399Z ### REQ-DOCS-3
2026-06-05T02:56:35.9154275Z - Title: Diátaxis structure; one canonical way to do X
2026-06-05T02:56:35.9154571Z - Required stages: 
2026-06-05T02:56:35.9154598Z 
2026-06-05T02:56:35.9154867Z ### REQ-DOCS-4
2026-06-05T02:56:35.9155781Z - Title: Agent-consumable layer (llms.txt, manifest schema, MCP, CLI help)
2026-06-05T02:56:35.9156097Z - Required stages: 
2026-06-05T02:56:35.9156111Z 
2026-06-05T02:56:35.9156388Z ### REQ-DOCS-5
2026-06-05T02:56:35.9157292Z - Title: Anti-drift: rustdoc/schema/exports/CLI-help generated + CI-checked
2026-06-05T02:56:35.9157607Z - Required stages: 
2026-06-05T02:56:35.9157623Z 
2026-06-05T02:56:35.9158018Z ### REQ-HAZARD-GRACE-BEFORE-SIGNOFF
2026-06-05T02:56:35.9158881Z - Title: Grace-period wait completes before composing INIT_SIGNOFF (1.1)
2026-06-05T02:56:35.9159288Z - Required stages: impl, unit
2026-06-05T02:56:35.9159305Z 
2026-06-05T02:56:35.9159673Z ### REQ-HAZARD-INFO-JSON-TORN-READ
2026-06-05T02:56:35.9160280Z - Title: State-file reads tolerate concurrent writes (1.2)
2026-06-05T02:56:35.9160605Z - Required stages: impl, unit
2026-06-05T02:56:35.9160622Z 
2026-06-05T02:56:35.9160950Z ### REQ-HAZARD-STALE-INDEX-LOCK
2026-06-05T02:56:35.9161429Z - Title: Sweep stale lockfiles on daemon boot (1.3)
2026-06-05T02:56:35.9161758Z - Required stages: impl, unit
2026-06-05T02:56:35.9161772Z 
2026-06-05T02:56:35.9162108Z ### REQ-HAZARD-DEFERRED-DRAIN
2026-06-05T02:56:35.9162940Z - Title: Deferred spool rows excluded from the event-stream drain (1.4)
2026-06-05T02:56:35.9163248Z - Required stages: impl, unit
2026-06-05T02:56:35.9163276Z 
2026-06-05T02:56:35.9163598Z ### REQ-HAZARD-WORKER-PATH
2026-06-05T02:56:35.9164387Z - Title: Single source of truth for Worker/Psyche perch location (1.5)
2026-06-05T02:56:35.9164711Z - Required stages: impl, unit
2026-06-05T02:56:35.9164726Z 
2026-06-05T02:56:35.9165088Z ### REQ-HAZARD-PARENT-PID-PREFER
2026-06-05T02:56:35.9165932Z - Title: Prefer stable parent PID / broker handle over ephemeral PID (2.1)
2026-06-05T02:56:35.9166215Z - Required stages: 
2026-06-05T02:56:35.9166233Z 
2026-06-05T02:56:35.9166557Z ### REQ-HAZARD-STDIN-SESSION-ID
2026-06-05T02:56:35.9167047Z - Title: Stdin session_id precedence over env (2.2)
2026-06-05T02:56:35.9167330Z - Required stages: 
2026-06-05T02:56:35.9167356Z 
2026-06-05T02:56:35.9167703Z ### REQ-HAZARD-HANDOFF-ARGV-COMPAT
2026-06-05T02:56:35.9168385Z - Title: Broker/brain IPC + handoff argv version-tolerant (2.3)
2026-06-05T02:56:35.9168696Z - Required stages: impl, unit
2026-06-05T02:56:35.9168711Z 
2026-06-05T02:56:35.9169034Z ### REQ-HAZARD-GEN-START-NOW
2026-06-05T02:56:35.9169667Z - Title: gen_start = now() on cold-start and handoff (2.4)
2026-06-05T02:56:35.9169989Z - Required stages: impl, int
2026-06-05T02:56:35.9170003Z 
2026-06-05T02:56:35.9170365Z ### REQ-HAZARD-EPHEMERAL-CLEANUP
2026-06-05T02:56:35.9171029Z - Title: Ephemeral perch cleanup on every ring exit path (3.1)
2026-06-05T02:56:35.9171357Z - Required stages: impl, unit
2026-06-05T02:56:35.9171375Z 
2026-06-05T02:56:35.9171751Z ### REQ-HAZARD-STALE-SIGNOFF-SENTINEL
2026-06-05T02:56:35.9172462Z - Title: Stale signoff sentinel does not kill a fresh start (3.2)
2026-06-05T02:56:35.9172787Z - Required stages: impl, unit
2026-06-05T02:56:35.9172802Z 
2026-06-05T02:56:35.9173148Z ### REQ-HAZARD-ECHO-BEFORE-SIGNOFF
2026-06-05T02:56:35.9174183Z - Title: Echo-commune fires before INIT_SIGNOFF on orphan teardown (3.3)
2026-06-05T02:56:35.9174497Z - Required stages: impl, unit
2026-06-05T02:56:35.9174511Z 
2026-06-05T02:56:35.9174890Z ### REQ-HAZARD-ENVELOPE-DECODE-ORDER
2026-06-05T02:56:35.9175524Z - Title: Envelope decode order, ampersand decoded last (4.1)
2026-06-05T02:56:35.9175967Z - Required stages: impl, unit
2026-06-05T02:56:35.9175984Z 
2026-06-05T02:56:35.9176363Z ### REQ-HAZARD-ENVELOPE-PARSER-SAFE
2026-06-05T02:56:35.9177120Z - Title: Two-slice envelope parser is panic-free and tolerant (4.2)
2026-06-05T02:56:35.9177446Z - Required stages: impl, unit
2026-06-05T02:56:35.9177461Z 
2026-06-05T02:56:35.9193211Z ### REQ-HAZARD-EVENTPART-REASSEMBLY
2026-06-05T02:56:35.9194307Z - Title: EVENT-PART split/reassembly is byte-exact; orphan parts dropped silently
2026-06-05T02:56:35.9194643Z - Required stages: impl, unit
2026-06-05T02:56:35.9194660Z 
2026-06-05T02:56:35.9194965Z ### REQ-HAZARD-ID-CHARSET
2026-06-05T02:56:35.9196191Z - Title: Addressable-id charset reserves :/@ delimiters; validated at every creation seam (4.6)
2026-06-05T02:56:35.9196518Z - Required stages: impl, unit
2026-06-05T02:56:35.9196532Z 
2026-06-05T02:56:35.9196897Z ### REQ-HAZARD-REGISTRY-STALE-CLEAN
2026-06-05T02:56:35.9197721Z - Title: Stale registry entries degrade to fallback, never hard-fail (4.3)
2026-06-05T02:56:35.9198048Z - Required stages: impl, unit
2026-06-05T02:56:35.9198062Z 
2026-06-05T02:56:35.9198418Z ### REQ-HAZARD-REGISTRY-CONCURRENT
2026-06-05T02:56:35.9199737Z - Title: Concurrent SQLite openers (registry/spool) must not fail with 'database is locked' (4.7)
2026-06-05T02:56:35.9200054Z - Required stages: impl, unit
2026-06-05T02:56:35.9200067Z 
2026-06-05T02:56:35.9200422Z ### REQ-HAZARD-REGISTRY-DIR-CREATE
2026-06-05T02:56:35.9202198Z - Title: SQLite store opens create their parent dir themselves — a fresh-home registry op must not SQLITE_CANTOPEN (4.9)
2026-06-05T02:56:35.9202540Z - Required stages: doc, impl, unit
2026-06-05T02:56:35.9202567Z 
2026-06-05T02:56:35.9202927Z ### REQ-HAZARD-REGISTRY-EPOCH-LEASE
2026-06-05T02:56:35.9204962Z - Title: Registry merge ordered by per-node monotonic epoch, never wall-clock — a stale Active can't clobber a newer Offline (4.8, red-team #8)
2026-06-05T02:56:35.9205294Z - Required stages: impl, unit
2026-06-05T02:56:35.9205320Z 
2026-06-05T02:56:35.9205699Z ### REQ-HAZARD-DEFERRED-SURVIVE-DRAIN
2026-06-05T02:56:35.9206643Z - Title: Deferred rows survive poll drain (4.4)
2026-06-05T02:56:35.9207072Z - Required stages: impl, unit
2026-06-05T02:56:35.9207087Z 
2026-06-05T02:56:35.9207508Z ### REQ-HAZARD-INBOX-NO-DOUBLE
2026-06-05T02:56:35.9208004Z - Title: No double-delivery via legacy inbox (4.5)
2026-06-05T02:56:35.9208411Z - Required stages: impl, unit
2026-06-05T02:56:35.9208426Z 
2026-06-05T02:56:35.9208905Z ### REQ-HAZARD-WINDOWS-PID-RECYCLE
2026-06-05T02:56:35.9209693Z - Title: Windows PID-recycling false positives guarded (5.1)
2026-06-05T02:56:35.9210100Z - Required stages: impl, unit
2026-06-05T02:56:35.9210129Z 
2026-06-05T02:56:35.9210482Z ### REQ-HAZARD-EBUSY-RENAME
2026-06-05T02:56:35.9211231Z - Title: tmp-write + atomic-rename + retry on Windows EBUSY (5.2)
2026-06-05T02:56:35.9211688Z - Required stages: impl, unit
2026-06-05T02:56:35.9211704Z 
2026-06-05T02:56:35.9212145Z ### REQ-HAZARD-SUBPROCESS-TIMEOUT
2026-06-05T02:56:35.9212781Z - Title: Every harness/git subprocess has a timeout (5.3)
2026-06-05T02:56:35.9213143Z - Required stages: impl, unit
2026-06-05T02:56:35.9213158Z 
2026-06-05T02:56:35.9213577Z ### REQ-HAZARD-UNC-PATH-STRIP
2026-06-05T02:56:35.9214309Z - Title: Strip Windows UNC prefix on serialized paths (5.4)
2026-06-05T02:56:35.9214693Z - Required stages: impl, unit
2026-06-05T02:56:35.9214708Z 
2026-06-05T02:56:35.9215149Z ### REQ-HAZARD-SINGLE-PATH-SOURCE
2026-06-05T02:56:35.9215959Z - Title: Single path/registry source of truth; no layout ambiguity (6.1)
2026-06-05T02:56:35.9216374Z - Required stages: impl, unit
2026-06-05T02:56:35.9216389Z 
2026-06-05T02:56:35.9217218Z ### REQ-HAZARD-SOFT-CLEANUP
2026-06-05T02:56:35.9218110Z - Title: Soft-cleanup preserves state, removes only the ready marker (6.2)
2026-06-05T02:56:35.9218515Z - Required stages: impl, unit
2026-06-05T02:56:35.9218531Z 
2026-06-05T02:56:35.9218920Z ### REQ-HAZARD-CASCADE-WIPE-GUARD
2026-06-05T02:56:35.9219941Z - Title: No hard-delete of a parent hosting non-empty children (6.3)
2026-06-05T02:56:35.9220403Z - Required stages: impl, unit
2026-06-05T02:56:35.9220420Z 
2026-06-05T02:56:35.9220860Z ### REQ-HAZARD-DROP-FILE-SINGLE-WRITER
2026-06-05T02:56:35.9221494Z - Title: Drop files are daemon-owned single-writer (6.4)
2026-06-05T02:56:35.9221867Z - Required stages: impl, unit
2026-06-05T02:56:35.9221882Z 
2026-06-05T02:56:35.9222361Z ### REQ-HAZARD-DIRECT-WRITE-PRECEDENCE
2026-06-05T02:56:35.9223461Z - Title: Direct-write precedence marker (with node id) guards stale overwrite (6.5)
2026-06-05T02:56:35.9223844Z - Required stages: impl, unit
2026-06-05T02:56:35.9223860Z 
2026-06-05T02:56:35.9224351Z ### REQ-HAZARD-CONFLICT-BOTH-PRESERVED
2026-06-05T02:56:35.9227593Z - Title: A surfaced concurrent context pair is durably preserved (both versions, tracked artifacts) until a strictly dominating write clears it; no reconcile failure path discards an unmerged version (6.6, ADR-0013)
2026-06-05T02:56:35.9228018Z - Required stages: impl, unit
2026-06-05T02:56:35.9228033Z 
2026-06-05T02:56:35.9228528Z ### REQ-HAZARD-DETACHED-PIPE-INHERIT
2026-06-05T02:56:35.9234658Z - Title: Windows detached long-lived children must not inherit a captured caller's pipe: every detach-spawn of an immortal child (daemon, shell binary) runs bInheritHandles=FALSE, or a caller capturing output anywhere up the process chain hangs forever on a pipe that never EOFs — std-handle flag stripping is NOT sufficient (grandparent strays still flow) (5.6)
2026-06-05T02:56:35.9235074Z - Required stages: impl, unit
2026-06-05T02:56:35.9235090Z 
2026-06-05T02:56:35.9235467Z ### REQ-HAZARD-CONPTY-DSR
2026-06-05T02:56:35.9236477Z - Title: ConPTY reader must auto-answer DSR (ESC[6n) or all child output stalls (5.5)
2026-06-05T02:56:35.9236939Z - Required stages: impl, unit
2026-06-05T02:56:35.9236956Z 
2026-06-05T02:56:35.9237381Z ### REQ-HAZARD-LOCAL-API-AUTH
2026-06-05T02:56:35.9238384Z - Title: Every local `api` mutation authenticated to an endpoint/session (codex #13)
2026-06-05T02:56:35.9238803Z - Required stages: impl, unit
2026-06-05T02:56:35.9238817Z 
2026-06-05T02:56:35.9239243Z ### REQ-HAZARD-RESTART-IDEMPOTENT
2026-06-05T02:56:35.9240648Z - Title: Idempotent/exactly-once delivery across brain restart at every broker boundary (codex #14)
2026-06-05T02:56:35.9241105Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9241121Z 
2026-06-05T02:56:35.9241499Z ### REQ-HAZARD-UPDATE-ROLLBACK
2026-06-05T02:56:35.9242828Z - Title: Self-update rejects version rollback; metadata expiry + adapter content signing (codex #5)
2026-06-05T02:56:35.9243187Z - Required stages: impl, unit
2026-06-05T02:56:35.9243202Z 
2026-06-05T02:56:35.9243712Z ### REQ-HAZARD-DAEMON-HOSTED-LIVENESS
2026-06-05T02:56:35.9246129Z - Title: Daemon-hosted perches (Psyche, spt-hosted Self) derive liveness from the daemon endpoint table + info.json status, never is_process_alive(info.pid) (2.5)
2026-06-05T02:56:35.9246625Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9246647Z 
2026-06-05T02:56:35.9247104Z ### REQ-HAZARD-PSYCHE-OUTBOUND-PROXY
2026-06-05T02:56:35.9251329Z - Title: Psyche outbound captured + sanitized: the live-Psyche turn driver captures stdout (never Stdio::null), and the daemon strips/re-stamps Psyche-supplied from=/target and constrains routing (reply→__REPLY_TO__ sender, notify→own user/subnet) (7.3)
2026-06-05T02:56:35.9251782Z - Required stages: impl, unit
2026-06-05T02:56:35.9251797Z 
2026-06-05T02:56:35.9252293Z ### REQ-HAZARD-DAEMON-SCHED-NONBLOCKING
2026-06-05T02:56:35.9256034Z - Title: Per-agent pulse/psyche/echo-commune scheduling must not serialize across agents: each agent's bounded LLM call (echo-commune summarizer, Psyche turn) runs off the shared scheduler so one slow/hung call cannot stall another agent's tick (7.4)
2026-06-05T02:56:35.9256617Z - Required stages: impl, unit
2026-06-05T02:56:35.9256632Z 
2026-06-05T02:56:35.9257063Z ### REQ-HAZARD-PAIR-TRANSCRIPT-BIND
2026-06-05T02:56:35.9260670Z - Title: Pairing transcript binds roles, both node pubkeys, subnet ID, seed epoch, TOTP time-step, and confirmation MACs — or unknown-key-share/reflection/wrong-subnet/replay pairing remain possible (ADR-0005 #12)
2026-06-05T02:56:35.9261273Z - Required stages: impl, unit
2026-06-05T02:56:35.9261295Z 
2026-06-05T02:56:35.9261732Z ### REQ-HAZARD-PAIR-SEED-ROTATION
2026-06-05T02:56:35.9264769Z - Title: Removing a node rotates the subnet seed (epoch bump) so an old node/old seed cannot rejoin; trust-store delete alone is NOT revocation because the seed is replicated to every trusted node (ADR-0005 #10)
2026-06-05T02:56:35.9265180Z - Required stages: impl, unit
2026-06-05T02:56:35.9265196Z 
2026-06-05T02:56:35.9265631Z ### REQ-HAZARD-PAIR-RATE-LIMIT
2026-06-05T02:56:35.9270407Z - Title: Subnet-global pairing rate limit: one active ceremony per subnet, shared attempt counter, exponential backoff — a public pre-trust relay + multiple seed-holders otherwise enables distributed SPAKE2 guessing (and ±1 TOTP window triples the valid-password space) (ADR-0005 #11)
2026-06-05T02:56:35.9270849Z - Required stages: impl, unit
2026-06-05T02:56:35.9270865Z 
2026-06-05T02:56:35.9271237Z ### REQ-HAZARD-WAN-ORIGIN-AUTH
2026-06-05T02:56:35.9275402Z - Title: WAN-inbound origin is transport truth, never payload: the access gate's subject (ADR-0009 origin-node whitelist) is the QUIC handshake-proven remote node id from the broker's conn/stream table — a forged origin/node field inside record bytes is inert (7.5)
2026-06-05T02:56:35.9275917Z - Required stages: doc, impl, unit
2026-06-05T02:56:35.9275933Z 
2026-06-05T02:56:35.9276251Z ### REQ-CONSENT-1
2026-06-05T02:56:35.9281698Z - Title: Consent grant store: capability x subject-agent x target-node rows, enforced at the target node, subnet-settable (replicates as security material near the trust store), revocable; gated-capability ids (remote-exec, instantiate-anywhere) reserved-but-refusing; v1 consumers are the shell spawn gates (CONTEXT Consent & security gates)
2026-06-05T02:56:35.9282180Z - Required stages: impl, unit
2026-06-05T02:56:35.9282206Z 
2026-06-05T02:56:35.9282499Z ### REQ-CONSENT-2
2026-06-05T02:56:35.9287413Z - Title: Interactive consent escalation: an ungated high-risk action routes a consent prompt to the user's most-recently-active session; allow-once / allow-always (writes a grant) / deny; pre-consent flags (can_shutdown, shell_wake_spawn_anywhere) author grants via manifest/settings (CONTEXT Consent & security gates)
2026-06-05T02:56:35.9287784Z - Required stages: impl, unit
2026-06-05T02:56:35.9287799Z 
2026-06-05T02:56:35.9288164Z ### REQ-PRES-1
2026-06-05T02:56:35.9295565Z - Title: Presence resolution: the presence datum (last_active_node, last_active_endpoint, ts) gossiped subnet-wide via the agent-interaction heartbeat (rides registry distribution, visibility-gated) + one first-class most-recently-active resolution API consumed by notif first-fire, update-consent delivery, consent escalation, and shell wake resolution (M5 scope decision 1: resolution only — the PresenceChannel endpoint stays deferred)
2026-06-05T02:56:35.9295956Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9295973Z 
2026-06-05T02:56:35.9296430Z ### REQ-SHELL-1
2026-06-05T02:56:35.9301683Z - Title: Shell hosting machinery: shell perch under the owner (type/owner/adapter_name/status/alias), broker-launched binary + api bind local-link handshake, the three channels (command durable, text+file durable + progress-queryable, sensory REST-only never spooled + dropped-unless-owner-live), owner exclusivity (CONTEXT Shell model)
2026-06-05T02:56:35.9302055Z - Required stages: impl, unit
2026-06-05T02:56:35.9302068Z 
2026-06-05T02:56:35.9302421Z ### REQ-SHELL-2
2026-06-05T02:56:35.9310359Z - Title: Shell sleep/wake: link-break always closes the binary (pre-close instruction + termination timeout), ephemeral teardown vs persistent offline/relink, wake_command wake-watcher (offline-only, exit-opcode supervision, exponential backoff + give-up), state-keyed wake resolution (dormant/suspended/active-elsewhere; no-reachable refuses — spawn-anywhere branch deferred), spt shutdown owner cascade + api owner-shutdown gated by can_shutdown (CONTEXT Shell sleep/wake)
2026-06-05T02:56:35.9311075Z - Required stages: impl, unit, int
2026-06-05T02:56:35.9311095Z 
2026-06-05T02:56:35.9311493Z ## How to report back
2026-06-05T02:56:35.9311508Z 
2026-06-05T02:56:35.9312273Z For every (requirement, failing criterion) pair, emit one finding:
2026-06-05T02:56:35.9312288Z 
2026-06-05T02:56:35.9312569Z     {
2026-06-05T02:56:35.9313034Z       "code": "requirement_quality",
2026-06-05T02:56:35.9313441Z       "requirementId": "REQ-...",
2026-06-05T02:56:35.9314220Z       "criterion": "singular" | "verifiable" | "atomic" | "active-voice",
2026-06-05T02:56:35.9314635Z       "message": "<short reason>",
2026-06-05T02:56:35.9315086Z       "suggestedRevision": "<optional rewrite>"
2026-06-05T02:56:35.9315451Z     }
2026-06-05T02:56:35.9315467Z 
2026-06-05T02:56:35.9316318Z Wrap your response as { "findings": [ ... ] } listing only your concerns; the
2026-06-05T02:56:35.9316970Z deterministic findings above don't need to be repeated.
