# Spec authoring task

[ProtocolWarden]

Auto-generated by Operations Center execution.

Goal

Spec authoring task

Write a focused improvement-campaign spec at docs/specs/queue-drain-20260606T223739.md in this repository (OperationsCenter). The spec drives a multi-task Plane campaign; keep its goals concrete and bounded.

Required output

Create exactly one file: docs/specs/queue-drain-20260606T223739.md. Do not modify any other file.

The first line of the file MUST be an HTML comment recording provenance:
<!-- generated_by_run: baa74678-816c-46dd-9be0-6e2167e60c90 -->

Then a YAML front-matter block in this exact format:

---
campaign_id: <UUID v4 you generate>
slug: queue-drain-20260606T223739
phases:
  - implement
  - test
  - improve
repos:
  - <one repo from the Available Repos list below>
area_keywords:
  - <directory prefix or topic keyword>
status: active
created_at: <ISO 8601 UTC timestamp>
---

Then markdown sections:

• ## Overview (2-3 sentences)
• ## Goals (numbered list of 2-4 concrete, bounded tasks; each completable in one executor run under 1 hour)
• ## Constraints (approach decisions, allowed paths, things to avoid)
• ## Success Criteria (how to know it is done)

Available Repos

• ContextLifecycle
• CoreRunner
• CritiqueExecutor
• Custodian
• CxRP
• DAGExecutor
• OperationsCenter
• OperatorConsole
• PlatformDeployment
• PlatformManifest
• ProtocolWarden
• RepoGraph
• RxP
• SourceRegistry
• SwitchBoard
• SyncMechanism
• TeamExecutor
• VideoFoundry
• Warehouse

Operator Direction

''

Recent Git Activity (OperationsCenter)

66fba66e fix(ci): green main — register reconcile_enforce key + drop unused import (#242)
f92223a1 refactor: generalize private-manifest instance refs to role phrasing (#241)
dba83e2d fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#240)
9bf3adf1 docs: clarify watch-all (OC pipeline) vs external tools/loop controller (#239)
cdf97c27 feat(reconcile): reconcile OperationsCenter .console (prune + scrub + enforce) (#238)
e06d5b5d fix(reviewer): reapply OC-venv ruff fallback lost in coverage merge (#236) (#237)
6225ed4c test: raise unit coverage to 95.75% and lift gate to 90% (#236)
70187b78 # Spec authoring task (#234)
9f9878cd test: raise unit coverage past the 85% gate (61.5% -> 86.9%) (#232)
568b5a38 fix(spec-author): strip executor run-ID comment before YAML front matter parse

Recent Git Activity (VideoFoundry)

87df0607a merge: reconcile .console housekeeping (6a40a0136) with desync fixes
674abab12 fix(vo): preserve real audio length in voice_over_duration (desync source fix)
6a40a0136 chore(console): reconcile .console/ — prune + doc backfill + enforce R1
07378d00e fix(scene-timing): floor overlay windows to actual WAV duration to eliminate early reveal
89563beef merge: bring pre-push hook chore (c50e33f71) onto dev
514195dc3 fix(audit): rebase overlay_drift gate on actual audio timeline to close plan-vs-plan blind spot
c50e33f71 chore(hooks): drop literal instance candidate from pre-push artifact discovery
5c4d3a2f6 fix(audit): treat zero-exit empty ASR artifact as observability gap
3cf546593 fix(echogarden,audit): fix large-v3 model download and treat ASR infra failure as None
6c169f589 fix(text-render): use tighter step for tied clusters to cap reveal-chain drift

Recent Git Activity (OperatorConsole)

eb5ee25 fix(ci): resolve E701 lint findings in watcher_status_pane (#66)
eb01e6c refactor: generalize private-manifest instance refs to role phrasing (#65)
6ed719f fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#64)
8d4a732 chore(console): reconcile .console/ — prune completed history + enforce R1/R2 (#63)
4336d9a feat(hot-trim): trim log + historical backlog sections from the compiled context (spec §5) (#62)
b266fb7 fix(status-pane): put full section content in the scroll buffer
bcbba43 feat(status-pane): per-model worker backend rows; split Backend Limits section
80a1664 fix(pane): move controller idle countdown out of Active section
1d9dcd8 feat(pane): show controller idle countdown in Active section
9374346 fix(status-pane): exclude connectivity errors from recent task events

Recent Git Activity (SwitchBoard)

62e8af4 fix(ci): make CI green on main — lockfile, SPDX headers, doctor key, lint (#20)
a5786b3 refactor: generalize private-manifest instance refs to role phrasing (#19)
20bea20 fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#18)
097eccd chore(reconcile): enable R1/R2 enforcement (clean + under budget) (#17)
8662091 chore: remove stale kodo and archon references
c009ac8 Merge pull request #16 from ProtocolWarden/fix/fence-console-context
6970938 fix: add closing fence to console-context block in CLAUDE.md
f2e71d5 rename: ExecutorRuntime → CoreRunner (reference update)
ecc8a52 chore: rename ExecutorRuntime → CoreRunner in README
4fe3a6f merge: p5 LaneDecision.metadata + worker_backend emission

Recent Git Activity (PlatformDeployment)

cd70cba fix(ci): make CI green — add missing SPDX header + satisfy custodian-doctor (#30)
20d7760 refactor: generalize private-manifest instance refs to role resolution (#29)
739dbcb fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#28)
525f559 chore(console): reconcile — scrub private identifiers + enable reconcile_enforce (#27)
42e8ca8 docs(adr): ADR 0005 — sync-spec declarations belong in manifests (#26)
068e664 fix: land genericized sync docs + standardize pre-push hook (#25)
cfca45f docs: ADR 0004 + sync-topology — manifest as sync authority (#23)
d43f6a4 Merge pull request #22 from ProtocolWarden/docs/adr-0003-boundary-tenancy
8f945ca docs(adr): 0003 — single-tenant boundary artifact, multi-tenant migration
1766e0b chore(custodian): exempt ADR 0002 cross-repo symbols from K1

Recent Git Activity (Custodian)

3e282db feat(audit): DC9 — docs/README.md index-coverage detector (#35)
de50472 feat(context): targeted warm-injection rollout — ci-conventions leaf doc (#34)
75d4fa0 ci: install ripgrep for the federated semantic gate (#33)
d26e1ef ci: install ripgrep for the federated semantic gate (#32)
b2c14b9 ci: call the gate by its real entrypoint name (#31)
b7112fd fix(ci): make CI and semantic-federation green on main (#30)
5dc2e01 refactor: generalize private-manifest instance refs to role phrasing (#29)
2988ded fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#28)
e9eaf70 fix(reconcile): make R1/R2 opt-in (audit.reconcile_enforce, default off) (#27)
ee626f1 feat(reconcile): R-class detectors + reconciliation pilot (.console reconciliation spec) (#26)

Recent Git Activity (CxRP)

82c6196 fix(ci): declare reconcile_enforce via plugin_audit_keys to satisfy custodian-doctor --strict (#20)
7e25e0f refactor: generalize private-manifest instance refs to role phrasing (#19)
caadd88 fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#18)
b0547fd chore(console): scrub private identifiers + enable reconcile_enforce (#17)
716ef94 chore: standardize pre-push hook to auto-discovering variant (#16)
d0799ce chore: remove stale kodo and archon references
db661a0 Merge pull request #15 from ProtocolWarden/chore/corerunner-refs
374720f chore: rename ExecutorRuntime → CoreRunner in integration doc
bdbbf89 Merge fix/remove-kodo-archon-refs: remove live kodo/archon references
1f07356 fix: remove live kodo/archon references from src and test fixtures

Recent Git Activity (TeamExecutor)

e3d9497 chore(custodian): fail closed without the boundary artifact (#9)
0685485 refactor: generalize private-manifest instance refs to role phrasing (#8)
8bdfaf0 ci(audit): real custodian audit; rename ruff/pytest workflow to ci (#7)
e679a60 chore(console): reconcile .console — enforce R1/R2 (clean, under budget) (#6)
eac98ee fix: pin custodian to SHA; add ruff/pytest validation; upgrade stop.sh to Gen 2
f092f90 feat(team-executor): hard cut over middle tier to standard
2c96057 feat(runtime): add backend-specific team tiers
4977dfb chore: clear custodian findings + add unit tests (#5)
62753a0 chore: standardize pre-push hook file (activation deferred until findings cleared) (#4)
1568838 feat(p5): revert local cognition scaffolding, replace with cl shim

Recent Git Activity (DAGExecutor)

92c7074 chore(custodian): fail closed without the boundary artifact (#8)
e178188 refactor: generalize private-manifest instance refs to role phrasing (#7)
5f4b964 fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#6)
8c6d01c chore(console): enforce R1/R2 reconciliation detectors (#5)
e809cee fix: pin custodian to SHA; add ruff/pytest validation; upgrade stop.sh to Gen 2
2eb326a chore(hooks): upgrade stop.sh to Gen 2 ContextGuard (CL_ANCHOR-based)
3f8d37b feat(agent): add backend-aware model effort selection
0592d4f chore: clear custodian findings + add unit tests (#4)
1d19b61 chore: standardize pre-push hook file (activation deferred until findings cleared) (#3)
6209c6d feat(p5): revert local cognition scaffolding, replace with cl shim

Recent Git Activity (CritiqueExecutor)

2cd4c0a refactor: generalize private-manifest instance refs to role phrasing (#7)
baa8f29 fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#6)
e88d1af chore(console): enforce R1/R2 — repo reconciled + clean (#5)
12ac488 fix: pin custodian to SHA; add ruff/pytest validation; upgrade stop.sh to Gen 2
210b15e chore(hooks): upgrade stop.sh to Gen 2 ContextGuard (CL_ANCHOR-based)
8a0a76b docs: clarify critique draft agent terminology
44d6448 feat(runtime): add backend-aware critique tiers
9fc7914 chore: clear custodian findings + add unit tests (#4)
34edada chore: standardize pre-push hook file (activation deferred until findings cleared) (#3)
a4e6d73 feat(p5): revert local cognition scaffolding, replace with cl shim

Recent Git Activity (RxP)

ea39c34 fix(ci): run pytest inside .venv to satisfy conftest venv guard (#14)
976d4c9 refactor: generalize private-manifest instance refs to role phrasing (#13)
3bb537d fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#12)
69bd01e chore(console): enable R1/R2 reconciliation enforcement (#11)
800f409 chore: standardize pre-push hook to auto-discovering variant (#10)
9ef1419 chore: remove stale kodo and archon references
75df1ee Add closing  fence to CLAUDE.md (#9)
c94e53c chore: rename ExecutorRuntime → CoreRunner in GitHub templates
c41f95c Merge pull request #8 from ProtocolWarden/chore/corerunner-refs
819691d chore: rename ExecutorRuntime → CoreRunner in all docs

Recent Git Activity (CoreRunner)

52a2f61 fix(ci): run pytest inside project .venv so the test job goes green (#19)
984a725 refactor: generalize private-manifest instance refs to role phrasing (#18)
fbb4f53 fix(ci): boundary artifact from B64 secret (unbreak audit + enable R2) (#17)
19020fc chore(console): enable R1/R2 enforcement — repo reconciled + clean (#16)
f1438f2 chore: standardize pre-push hook to auto-discovering variant (#15)
d250870 Add closing  fence to CLAUDE.md (#14)
fa5ab8c fix: skip SIGTERM handler registration when called from non-main thread
a145a76 rename: ExecutorRuntime → CoreRunner (reference update)
83a46cd chore: rename ExecutorRuntime → CoreRunner in issue templates
111a867 chore: hard cutover — remove all remaining ExecutorRuntime references

Recent Git Activity (SourceRegistry)

e5ce32e fix(ci): run pytest inside .venv to satisfy conftest venv guard (#13)
1649442 refactor: generalize private-manifest instance refs to role phrasing (#12)
1abff0d fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#11)
8262f65 chore(console): enforce-only reconciliation — flip reconcile_enforce true (#10)
f049361 chore: standardize pre-push hook to auto-discovering variant (#9)
cca6508 Add closing  fence to CLAUDE.md (#8)
5e35d01 chore: rename ExecutorRuntime → CoreRunner in docs and templates
4a31a19 Merge fix/remove-kodo-archon-refs: remove live kodo/archon references
32dbcea fix: remove live kodo/archon references from src and test fixtures
89fd3ed Merge fix/gitignore-console-policy into main

Recent Git Activity (RepoGraph)

e9d85c9 feat(registry): shared private-manifest role resolver + instance-ref generalization (#5)
73222f9 ci(audit): add custodian-audit workflow (R2-in-CI via B64 boundary artifact) (#4)
80ed89b chore(reconcile): scrub scrub-target leaks from .console/ + enable enforce (#3)
4159561 chore: clear custodian findings + onboard hooks (#2)
687e604 feat(authz): can_anchor_host accepts canonical name or snake_case key
5a91cc5 feat(p2): manifest registry + can_anchor_host + find_anchor_for_path
aec0ac7 Merge pull request #1 from ProtocolWarden/fix/fence-console-context
e3d7752 fix: add closing fence to console-context block in CLAUDE.md
e9a476c Merge fix/gitignore-console-policy into main
fde9938 fix(gitignore): add CLAUDE.md and .custodian/tmp*.yaml

Recent Git Activity (Warehouse)

b00d7a5 refactor: generalize private-manifest instance refs to role phrasing (#8)
4fcdfae fix(ci): boundary artifact from B64 secret + hooksPath (unbreak audit, enable R2) (#7)
4bed4d2 chore(console): reconcile — scrub private-repo identifier + enable reconcile_enforce (#6)
999279f chore: standardize pre-push hook to auto-discovering variant (#5)
9cf6d4e Merge chore/track-console-files into main
855aada chore: track .console session source files
102a525 Merge fix/gitignore-console-policy into main
fb7694e fix(gitignore): correct .console/* pattern and add CLAUDE.md + custodian tmp exclusion
a0397cf Merge fix/license-headers into main
dfe3c89 fix: replace proprietary DV headers with AGPL-3.0-or-later ProtocolWarden headers

Recent Git Activity (ContextLifecycle)

4cc7b45 fix(session): retention audit follow-ups — recovery window, race, tests (#25)
811f526 feat(session): opportunistic two-stage auto-GC at session start (#24)
f077120 feat(session): cl session prune — age-based ephemeral-state retention (#23)
f0862af fix(reconcile): prune apply lock + index --check freshness gate (#22)
a194c39 feat(reconcile): treat the private-manifest repo itself as private (#21)
8a5fa06 feat(reconcile): private-repo scrub exemption — self-name signals private (#20)
f9d5a86 refactor: generalize private-manifest instance refs to role phrasing (#19)
2812e22 ci(audit): add custodian-audit workflow + genericize a docstring example (#18)
d028a85 fix(reconcile): one CHANGELOG line per item in prune (not per matched section) (#17)
034f26a feat(reconcile): index lists enforce-only public repos (full fleet view) (#16)

Recent Git Activity (SyncMechanism)

37ca59e fix(ci): green the CI workflow — venv test job + missing SPDX headers (#5)
862bb5d refactor: generalize private-manifest instance refs to role phrasing (#4)
d1a525e ci(audit): add custodian-audit workflow (R2-in-CI via B64 boundary artifact) (#3)
f3f3423 chore(console): enforce R1/R2 reconciliation detectors (#2)
f35bab6 ci: add GitHub Actions CI workflow (lint, test, license headers)
1625922 feat(spec): manifest-declared sync-spec contract + CLI (#1)
563e5c2 feat: initial public-safe Syncthing install/runtime mechanism

Recent Git Activity (PlatformManifest)

88af9391f chore(console): queue one-time provision run for the other host (#73)
421c51061 chore(provision): pull CL/RepoGraph on re-provision (tool freshness) (#72)
9acfebb80 docs(anchoring): session retention driver — auto-GC at session start (#71)
b0ca0fcdb docs: close the three audit tail items (lease retention, §4 deferral, counts) (#70)
bd65452a7 chore: dashboard freshness gate in pre-push + shared private-manifest resolver (#69)
07a8449ff docs: fix 5 confirmed findings from the 4-arc spec audit (#68)
b39a63ff6 docs(anchoring): add OC executor-backend cl_wrap subsection (#67)
047956a8b fix(docs): index cognition-memory-overview from docs/README.md (DC7) (#66)
88575f975 docs(architecture): cognition & memory overview — the connecting document (#65)
51b8f4c7e docs(context): close phase-3 capture as superseded; retire inert stop-hook nudge (#64)

Recent Git Activity (ProtocolWarden)

cb17757 refactor: generalize private-manifest instance refs to role phrasing (#7)
5340fed ci(audit): add custodian-audit workflow (R2-in-CI via B64 boundary artifact) (#6)
2809d67 chore(console): enforce R1/R2 — repo reconciled, clean, under budget (#5)
6fe5c15 docs: add SyncMechanism to the org profile catalog; note CL tiered memory (#4)
5586d6d chore: onboard Custodian (config, hooks, README sections, changelog) (#3)
367bac8 chore: rename ContextLifecycleProtocol → ContextLifecycle
fb6bf2d Merge pull request #2 from ProtocolWarden/fix/fence-console-context
db7614b fix: add closing fence to console-context block in CLAUDE.md
2ac9f23 Merge pull request #1 from ProtocolWarden/feat/add-clp
d50e59d feat: add ContextLifecycleProtocol to org profile

Existing Specs (do not duplicate)

• adaptive-loop-integration-tests
• admin-api-test-coverage
• ci-coordinator-decision-tests
• cxrp-backend-card-vocabulary
• decision-rules-test-coverage
• executor-adapter-unit-tests
• operational-health-test-coverage
• p5-adapter-and-board-unblock-tests
• platform-cli-test-coverage
• proposer-consumes-custodian-sweep
• queue-drain-20260528T093334
• queue-drain-20260529T071544
• queue-drain-20260529T072958
• queue-drain-20260529T221550
• queue-drain-20260530T070849
• queue-drain-20260530T110727
• queue-drain-20260602T154025
• queue-drain-20260602T161637
• queue-drain-20260602T162243
• queue-drain-20260602T162852
• queue-drain-20260602T172812
• queue-drain-20260602T173420
• queue-drain-20260602T234758
• recovery-subsystem-test-coverage
• reviewer-pr-state-machine
• scene-timing-audit-test-hardening
• watcher-entrypoint-test-coverage

Board Summary

• ready: 0
• running: 0
• drained: True
• trigger_source: queue_drain

Boundaries

• Touch exactly one file: docs/specs/queue-drain-20260606T223739.md.
• Do not modify any other repo content.
• Pick exactly one repo for the repos: field from Available Repos.
• Prefer 2-4 small goals over one large one.

[ProtocolWarden]

Needs human attention (reason=no_verdict_unreviewable). Left open — not merged (unresolved) and not closed (work preserved).

Self-review produced no parseable verdict after repeated passes (likely a transient backend/rate-limit issue, or a diff too large to review). The PR is left open for human attention; automated review will retry.

[ProtocolWarden]

Self-review concerns — auto-fixing (up to 6 attempts; re-queued if still unresolved):

Stage 1 — Goals completeness: Goal 3 contains an ambiguity that conflicts with the measurable success criteria.

• Specific issue: Goal 3 states "Create 5–7 synthetic fixture repositories" but Success Criteria 2 explicitly requires validation against "7 fixture categories." This range creates uncertainty about the actual target number of fixtures needed to satisfy the success criteria.

• Impact: The spec is not implementable without clarification — a developer cannot know whether to deliver 5, 6, or 7 fixtures without risking test coverage misalignment or over-delivery.

• Fix (actionable): Change Goal 3 from "Create 5–7 synthetic fixture repositories" to "Create 7 synthetic fixture repositories with intentional policy violations..." This locks the target to exactly 7, matching the deterministic requirement in Success Criteria 2.

Other stages pass:
✅ Stage 0: YAML frontmatter and structure valid
✅ Stage 2: Constraints section valid and feasible
✅ Stage 3: Success criteria complete and measurable
✅ Stage 4: No tooling artifacts in diff
✅ Stage 5: Markdown formatting and clarity correct

To resolve: Edit the spec file and change Goal 3's range to a fixed count of 7 fixtures, then re-run review.

[ProtocolWarden]

Stale-flag retraction (operator session, 2026-06-07 PR-history audit): the "Needs human attention" / self-review flag above was never retracted after conditions changed — this PR merged and main's CI failures of that period traced to the fleet-wide R1 detector-ID collision, fixed in #246 (main green since 2026-06-07T15:25Z). No action needed. A self-retracting-verdict improvement is queued in .console/task.md.