Foreman v0.2.5 Beacon

Foreman is a cross-vendor architect/worker orchestration skill for coding agents. A high-judgment architect routes five-part specs to implementer and auditor lanes, then ships only after independent verification.

What's in this release — orchestration hardening

v0.2.5 makes the dominant workflow failure — an agent backgrounding its work and ending its turn, stranding the round — structurally impossible rather than merely detectable. Six prevention criteria are proven (docs/notes/2026-07-18-v025-sc-proof.md): a round launched through the stack completes, writes its report, and records round_done with the dispatching agent gone, zero manual resumes.

Process ownership — foreman-launch (TypeScript on Bun 1.3.14, compiled Windows x64 + POSIX builds from one source): Job Object with KILL_ON_JOB_CLOSE makes orphans impossible by construction; graded stop, frozen heartbeat schema, --detach, nested-launcher reap proven by test. The POSIX build's no-kernel-cascade asymmetry is honestly documented with the -pgid reaper rule.

Round ownership — lane-run --round: the pueue daemon owns implement → gate → report → round_done; the terminal predicate demands whole-round exit plus an attempt-fresh report, so stale artifacts never masquerade as completion.

Queue admission — lane-queue over pueue: per-vendor concurrency groups, a host-wide gate group serializing every test run, and a per-shell quote-preserving submit layer (PowerShell and POSIX, fail-fast on anything unclassifiable).

Observability — watch v2 on the VTICK injectable clock: ten typed states, phase-aware thresholds, liveness from launcher heartbeats (queued is not running; verifying is not stalled; silence alone never classifies). Production-threshold stall walks test in 2.5 seconds instead of 15 minutes.

Recovery — lane-supervise: bounded auto-resume (default 2 attempts, then one terminal alert) from the event log, checkpoints, and heartbeats alone, with hard never-rules against racing live lanes.

Integrity — merge-gate (merge-base freshness verdicts, no auto-salvage), the wt-merge gitignored-report fix, wt-cleanup report archiving, event schema v2 with atomic compaction, vendor config isolation plumbing, and an LF-pinned, slow/fast-tagged test suite grown 127 → 245.

Four product defects were caught pre-push by the release's own gate discipline (stdbuf LD_PRELOAD poisoning, pueue argv re-parse, unguarded shell quoting, MSYS path conversion) — each sealed with a permanent regression test and a bugeventlog doctrine entry.

Honest residuals: real-vendor concurrency verdict deferred (caps stay 1); [audit.policy] consumed from v0.3.0; launcher-absent lanes outside auto-resume scope.

Install

git clone https://github.com/CharlesHoskinson/foreman
cd foreman && ./install.sh    # or .\install.ps1 on Windows

Operator guide: skills/foreman/references/orchestration-hardening.md. Next: v0.3.0 session transport — adapters spawn through the launcher (see ROADMAP.md).