Solweaver v0.3.0 — Verified Runtime & Review Gates

Highlights

• Verifies every package-owned child from session turn_context metadata before accepting worker reports or reviewer verdicts.
• Requires Terra Max for terra_worker, Luna Max for luna_worker, and Sol Max for solweaver_reviewer.
• Preserves shared-worktree changes when worker identity is missing or mismatched while refusing to count the lane as correctly routed.
• Rejects strict-review verdicts when reviewer model or effort cannot be verified.
• Adds a fix-first closure matrix and pauses for design/acceptance reconciliation after two consecutive fix-first verdicts.
• Adds an installed-skill validator, restarted-task runtime smoke test, isolated CI installation checks, and backup-on-upgrade support.

Gate scope

Runtime identity intentionally checks only turn_context.model and turn_context.effort. Agent self-reports, task labels, UI names, and configured sandbox values are not runtime proof.

Review-loop safety

A fresh reviewer still inspects the complete diff independently. Review count never permits shipping: strict acceptance always requires ship from a fresh runtime-verified reviewer. Consequential product, architecture, or acceptance ambiguity is escalated instead of looping or lowering the review bar.

Upgrade

Pull the latest repository and run python3 scripts/install.py --upgrade. Existing non-identical Solweaver files are backed up before replacement. Restart Codex or open a new task after upgrading.