Claude Architect v0.16.0

Hardening release from a full-day dogfooding session that surfaced eleven delegation-lane and runtime defects; every fix in this release was itself implemented through delegatePipeline.

Added

• Pre-dispatch verification baseline — every spec verification command runs against clean HEAD in a disposable worktree before producers are probed; unexpected failures stop the attempt with the new environment-defect classification. expectBaselineFailure: true opts intentional bug-reproducer specs out; read-only specs skip with explicit evidence. The baseline verifier is dependency-injectable.
• Clean-room dependency inheritance — verification/baseline worktrees symlink node_modules from the primary checkout when the lockfile is byte-identical (dependencyLink evidence), so npx tsc/vitest gates no longer fail falsely.
• Fixer commit capability — fix-round producers receive the linked worktree's private gitdir and shared object database as sandbox writable roots; git commit inside the sandbox now succeeds instead of every fix round ending blocked on a denied index.lock.
• Action-first edit prompts — CODEX_EDIT_ACTION_PREAMBLE on all non-read-only codex prompts; distilled constraints required in spec context.
• Edit timeout floor — RUNTIME_MIN_EDIT_TIMEOUT_MS (10 min) rejected-not-clamped; isolated codex runner defaults to a 600s cap (degrading gracefully without coreutils).
• Codex lane failure classification — FAILURE CLASSIFICATION: sandbox-attributable | real | mixed | unresolved | not-applicable with per-gate basis; a gate is real only when the wrapper's outside-sandbox rerun also fails.
• Delegate skill: Verification preflight and Coordinator duties sections.

Fixed

• Lanes ending their turn "waiting" on a background monitor: one foreground blocking Bash call (explicit timeout: 600000 tool parameter), exactly two valid turn endings, PID-rejoin loops with 10-minute stall detection.
• Parallel-lane data loss: unconditional per-lane worktree isolation, tree-wide git-state mutations forbidden on shared checkouts (propagated into producer prompts), disposable-worktree pre-existence checks, overlap-serialization with central integration, per-run private mktemp -d spec dirs.
• Producers never create commits; sandbox .git/index.lock denials are expected confinement, classified sandbox-attributable.
• Verification ordering: lint/format before the final type-check, non-mutating check mode, coverage of all touched typed files including new tests.
• The lane-contract test pins all of the above across both hosts.

Full details in CHANGELOG.md.