v0.2.9.0 — No-cap Andon/Jidoka runtime, validated run roots, and install-safe helpers

v0.2.9.0 is the largest runtime hardening release since the v0.2.4.x line.

A proper Andon/Jidoka escalation contract:

ANDON_PROBE -> ANDON_ESCALATE -> ANDON_HANDOFF

There are no arbitrary try caps or final-audit round caps.

ANDON_PROBE runs on the first abnormality and records proportional 5 Whys, Hansei, containment, countermeasure, and required rerun evidence.

ANDON_ESCALATE requires actual progress evidence — New evidence: and/or Changed approach: — and must cite prior same-class Andon log rows before treating a recurrence as the same class.

ANDON_HANDOFF is reserved for real blockers: unsafe scope, missing authorization, owner decision, external dependency, irreproducibility, missing access/tooling, or no bounded countermeasure remaining.

What changed

• No-cap Andon/Jidoka runtime

  • Added classed Andon logging to STATE.md.
  • Promoted official abnormality classes into the transcript contract.
  • Added recovered and blocked Andon transcript skeletons.
  • Added checker coverage so capped-retry language and malformed escalation transcripts cannot quietly return.

• Validated run-root substrate

  • Added validate-run-root.sh for dispatched run-root conformance and resume safety.
  • Completed shipped run-root templates for state, protocol, tools, context, and sidecars.
  • Tightened status vocabulary, pause/continuity marker handling, AUDIT_GAPS ordering, and final-audit transcript rules.
  • Isolated .IMPLEMENTAUDIT/ run-root artifacts from target-repo evidence scans so local audit debris does not contaminate cleanliness checks.

• Installed-consumer helper repair

  • Added IMPLEMENTAUDIT_SKILL_DIR helper-path resolution so packaged helper calls work from installed skills as well as from the source repo.
  • Hardened shipped helper scripts with smoke tests in minimal target repos.
  • Repaired helper-path and variable-collision issues found during dogfooding.

• Package and validation hardening

  • Package manifests now use stricter set-equality checks.
  • Shipped-path integrity checks prevent repo-only paths from leaking into installed payload instructions.
  • Validation registry parity now keeps test coverage wired into both local validation and CI.
  • README ToC, install/release claims, portal claims, and validation lists were reconciled against the live release state.

• Agent-eval and transcript grading

  • Added an adversarial fixtures/agent-eval/ pack for common misreads:
    terminal retry caps, autonomous-builder overreach, audit-only misunderstanding, release-bot overreach, and Lean-glossary theater.
  • Added a deterministic transcript grader for required markers, forbidden phrases, marker order, and no-terminal-cap checks.
  • These fixtures are evaluation inputs and expected transcript properties, not proof of live model behavior by themselves.

• Optional sidecar conventions

  • Graphify and ActiveGraph remain optional for consumer repos.
  • Markdown fallback remains first-class.
  • For maintaining IMPLEMENTAUDIT itself, the repo now has clearer sidecar conventions: per-run custody stores, absent-safe custody-append.sh, caused-by chaining for Andon custody events, and V0260-labeled historical backfill rules.
  • Sidecar evidence remains custody/orientation evidence, not correctness proof.

Upgrade notes

Installed skills do not auto-update. Repeat your install/update step for this release.

CHECKSUMS.txt is a SHA-256 checksum manifest for local integrity checking only. It is not a signature, attestation, SBOM, marketplace verification, provenance claim, or install verification.

No consumer repo is required to install Graphify or ActiveGraph. The skill remains usable with Markdown evidence and ordinary live-file Gemba.