Delegate a bounded task to a Luna worker

Added value: +{
+  "maxLength": 128,
+  "minLength": 1,
+  "type": "string"
+}

Removed value: -"Observable conditions that define done and can be judged from evidence."

Removed value: -"Optional concise, non-sensitive label for local activity views; parents should provide one for each batch task when a safe label is available (for example, 'Update auth retries'). It is persisted locally and may reveal this brief work description; omit it when that is not appropriate. Never derive it from the objective text."

Removed value: -"Declared workspace-relative glob scope, checked against observed edits after the run. Empty declares no in-workspace allowlist and does not declare read-only intent; workspace confinement remains."

Removed value: -"Opt in to at most one automatic repair turn when the initial result is conservatively classified as a local verification defect. The same worker thread and immutable task contract are reused. Omitted defaults to false."

Removed value: -"Explicit file-change expectation: forbidden means read-only and any runtime-observed edit violates the contract; optional means edits may be useful but are not required; required means the task is expected to produce an edit. Omitted defaults to required for compatibility. This is independent of allowedFiles and taskCategory."

Added value: +{
+  "description": "Optional per-call compute envelope. Narrows this installation's operator-owned baseline only and can never widen it. Omit to use the baseline.",
+  "properties": {
+    "allowEffortEscalation": {
+      "type": "boolean"
+    },
+    "allowStrongerFallback": {
+      "type": "boolean"
+    },
+    "maxConcurrency": {
+      "maximum": 8,
+      "minimum": 1,
+      "type": "integer"
+    },
+    "maxWorkersPerBatch": {
+      "maximum": 12,
+      "minimum": 1,
+      "type": "integer"
+    }
+  },
+  "type": "object"
+}

Removed value: -"Legacy plain-text task background. If contextCapsule is also supplied, both are sent; avoid duplication."

Removed value: -"Optional structured task background the worker cannot infer. It supplements the contract and legacy context; include only useful fields, omit empty fields, never copy the parent transcript, and do not duplicate other fields."

Removed value: -"Services, libraries, or internal modules the task depends on."

Removed value: -"Signatures, contracts, or boundaries that must remain stable."

Removed value: -"Rules that must remain true."

Removed value: -"Task-specific mistakes or failed approaches to avoid."

Removed value: -"Task background the worker cannot infer from the repository."

Removed value: -"Architecture or design decisions already settled by the parent orchestrator."

Removed value: -"Worker reasoning effort: medium = mechanical; high = bounded work needing judgement (routine default); xhigh = subtle, cross-cutting, or unclear cause; max = genuinely hard. Rate this task's difficulty, not project importance."

Removed value: -"One sentence justifying the effort from this task's difficulty."

Removed value: -"Workspace-relative globs observed edits must not match. Checked after the run and takes precedence over allowedFiles."

Removed value: -"One bounded executable task. Make the what, why, and expected outcome self-contained because the worker cannot see the conversation."

Removed value: -"Prior FAILED or BLOCKED attempts at this objective, so a retry can avoid repeating them and the result can report its attempt number."

Removed value: -"Why the earlier attempt did not succeed, in one sentence."

Previous value: -"full"New value: +"handoff"

Removed value: -"Choose compact routinely; it removes only successful verification output. Use full when that output is needed. The schema default remains full for backwards compatibility; failed, refused, and skipped output is retained."

Previous value: -[
-  "full",
-  "compact"
-]New value: +[
+  "handoff",
+  "compact",
+  "full"
+]

Added value: +{
+  "description": "Optional advisory routing declaration. Solo advice never blocks execution; declarations gate: every surface refuses empty seams, parallel also refuses mutable sharedState, shared-core coreOverlap, or tasks > seams. \"unknown\" biases advice solo, never refuses.",
+  "properties": {
+    "coreOverlap": {
+      "default": "unknown",
+      "enum": [
+        "disjoint",
+        "shared-core",
+        "unknown"
+      ],
+      "type": "string"
+    },
+    "integration": {
+      "default": "unknown",
+      "enum": [
+        "mechanical",
+        "architectural",
+        "unknown"
+      ],
+      "type": "string"
+    },
+    "seamSize": {
+      "default": "unknown",
+      "enum": [
+        "small",
+        "substantial",
+        "unknown"
+      ],
+      "type": "string"
+    },
+    "seams": {
+      "items": {
+        "maxLength": 48,
+        "minLength": 1,
+        "type": "string"
+      },
+      "maxItems": 12,
+      "type": "array"
+    },
+    "sharedState": {
+      "default": "unknown",
+      "enum": [
+        "none",
+        "read-only",
+        "mutable",
+        "unknown"
+      ],
+      "type": "string"
+    },
+    "verification": {
+      "default": "unknown",
+      "enum": [
+        "per-seam",
+        "shared-only",
+        "unknown"
+      ],
+      "type": "string"
+    }
+  },
+  "required": [
+    "seams"
+  ],
+  "type": "object"
+}

Removed value: -"Kind of executable work; it does not determine effort."

Removed value: -"Optional per-turn wall-clock budget; otherwise uses the configured default (normally 1800 seconds)."

Removed value: -"Targeted deterministic checks that prove the bounded task; use a full suite only when the task genuinely requires it. The worker runs and reports them, and the orchestrator independently processes each under the configured policy. Executed orchestrator rows are authoritative, while refused or skipped rows prove nothing. Default allowlist mode refuses shell syntax."

Removed value: -"Absolute worker directory; defaults to the orchestrator's current directory."

Previous value: -{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "additionalProperties": false,
-  "properties": {
-    "attempt": {
-      "description": "Attempt number for this objective, from `previousAttempts`.",
-      "type": "number"
-    },
-    "changeIntent": {
-      "description": "Selected change intent carried into the review evidence.",
-      "enum": [
-        "forbidden",
-        "optional",
-        "required"
-      ],
-      "type": "string"
-    },
-    "continuationReference": {
-      "anyOf": [
-        {
-          "type": "string"
-        },
-        {
-          "type": "null"
-        }
-      ],
-      "description": "Opaque, single-use, server-lifetime reference for one explicit continuation; null when this result cannot be continued or the bound was consumed."
-    },
-    "discrepancies": {
-      "description": "Concrete mismatches between claims and observed evidence. Non-empty means do not accept the result as-is.",
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    "durationSeconds": {
-      "type": "number"
-    },
-    "effort": {
-      "type": "string"
-    },
-    "effortReason": {
-      "type": "string"
-    },
-    "errors": {
-      "description": "Runtime errors surfaced during the turn.",
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    "escalationAdvice": {
-      "anyOf": [
-        {
-          "type": "string"
-        },
-        {
-          "type": "null"
-        }
-      ],
-      "description": "When the task did not pass, what to change before retrying — including whether raising effort is actually justified."
-    },
-    "filesChanged": {
-      "description": "Union of runtime-observed and worker-claimed edits. observed: false means the runtime recorded no matching patch.",
-      "items": {
-        "additionalProperties": false,
-        "properties": {
-          "kind": {
-            "type": "string"
-          },
-          "observed": {
-            "description": "True if the Codex runtime itself recorded this edit.",
-            "type": "boolean"
-          },
-          "path": {
-            "type": "string"
-          },
-          "why": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "path",
-          "kind",
-          "why",
-          "observed"
-        ],
-        "type": "object"
-      },
-      "type": "array"
-    },
-    "followUps": {
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    "model": {
-      "type": "string"
-    },
-    "notes": {
-      "type": "string"
-    },
-    "repair": {
-      "anyOf": [
-        {
-          "additionalProperties": false,
-          "properties": {
-            "attempted": {
-              "type": "boolean"
-            },
-            "classification": {
-              "enum": [
-                "not-requested",
-                "not-needed",
-                "local-verification",
-                "read-only",
-                "contract-or-requirement",
-                "scope-or-conflict",
-                "environment-or-tooling",
-                "security-or-trust-boundary",
-                "wider-scope"
-              ],
-              "type": "string"
-            },
-            "failureEvidence": {
-              "items": {
-                "additionalProperties": false,
-                "properties": {
-                  "command": {
-                    "type": "string"
-                  },
-                  "execution": {
-                    "enum": [
-                      "argv",
-                      "shell"
-                    ],
-                    "type": "string"
-                  },
-                  "exitCode": {
-                    "anyOf": [
-                      {
-                        "type": "number"
-                      },
-                      {
-                        "type": "null"
-                      }
-                    ]
-                  },
-                  "output": {
-                    "type": "string"
-                  }
-                },
-                "required": [
-                  "command",
-                  "execution",
-                  "exitCode",
-                  "output"
-                ],
-                "type": "object"
-              },
-              "type": "array"
-            },
-            "reason": {
-              "type": "string"
-            },
-            "requested": {
-              "type": "boolean"
-            }
-          },
-          "required": [
-            "requested",
-            "attempted",
-            "classification",
-            "reason",
-            "failureEvidence"
-          ],
-          "type": "object"
-        },
-        {
-          "type": "null"
-        }
-      ],
-      "description": "Bounded automatic-repair decision and the concise authoritative failure evidence supplied to the resumed worker. Null or omitted when not requested."
-    },
-    "reviewChecklist": {
-      "description": "Risk-based checks the parent orchestrator must still make before accepting.",
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    "scopeViolations": {
-      "description": "Observed edits outside allowedFiles, matching forbiddenFiles, or escaping the workspace. Non-empty requires deeper review.",
-      "items": {
-        "type": "string"
-      },
-      "type": "array"
-    },
-    "summary": {
-      "description": "Worker's summary of what it did.",
-      "type": "string"
-    },
-    "trustworthy": {
-      "description": "False when claims conflict with observed evidence or runtime errors occurred; scrutinize the result before accepting.",
-      "type": "boolean"
-    },
-    "usage": {
-      "anyOf": [
-        {
-          "additionalProperties": false,
-          "properties": {
-            "cacheWriteInputTokens": {
-              "type": "number"
-            },
-            "cachedInputTokens": {
-              "type": "number"
-            },
-            "inputTokens": {
-              "type": "number"
-            },
-            "outputTokens": {
-              "type": "number"
-            },
-            "reasoningOutputTokens": {
-              "type": "number"
-            }
-          },
-          "required": [
-            "inputTokens",
-            "cachedInputTokens",
-            "outputTokens",
-            "reasoningOutputTokens"
-          ],
-          "type": "object"
-        },
-        {
-          "type": "null"
-        }
-      ]
-    },
-    "verdict": {
-      "description": "Orchestrator verdict from observed scope and configured verification; not copied from the worker's claim.",
-      "enum": [
-        "PASS",
-        "BLOCKED",
-        "FAILED"
-      ],
-      "type": "string"
-    },
-    "verification": {
-      "description": "Verification outcomes with provenance and execution status; use orchestrator rows to determine what actually ran.",
-      "items": {
-        "additionalProperties": false,
-        "properties": {
-          "command": {
-            "type": "string"
-          },
-          "execution": {
-            "description": "argv or shell = executed here; rejected = refused; skipped = disabled; reported = worker-only. Only successful executed rows prove a command.",
-            "enum": [
-              "argv",
-              "shell",
-              "rejected",
-              "skipped",
-              "reported"
-            ],
-            "type": "string"
-          },
-          "exitCode": {
-            "anyOf": [
-              {
-                "type": "number"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
-          "output": {
-            "type": "string"
-          },
-          "passed": {
-            "type": "boolean"
-          },
-          "source": {
-            "description": "Result provenance. Orchestrator rows authoritatively record execution, refusal, or skipping; worker rows are self-reported.",
-            "enum": [
-              "orchestrator",
-              "worker"
-            ],
-            "type": "string"
-          }
-        },
-        "required": [
-          "command",
-          "source",
-          "execution",
-          "exitCode",
-          "passed",
-          "output"
-        ],
-        "type": "object"
-      },
-      "type": "array"
-    },
-    "verificationMode": {
-      "description": "Execution policy in force: allowlist, off, or shell.",
-      "type": "string"
-    },
-    "workerClaimedFailureCauses": {
-      "description": "Normalized worker-declared failure causes. This is claim evidence, not an orchestrator repair or retry classification. Current results always include it; the field is optional only for backwards-compatible consumers.",
-      "items": {
-        "enum": [
-          "verification",
-          "requirements",
-          "implementation",
-          "environment-tooling",
-          "timeout",
-          "blocked",
-          "unclassified"
-        ],
-        "type": "string"
-      },
-      "type": "array"
-    },
-    "workerClaimedStatus": {
-      "description": "What the worker reported. Compare against `verdict`.",
-      "enum": [
-        "PASS",
-        "BLOCKED",
-        "FAILED"
-      ],
-      "type": "string"
-    },
-    "workerThreadId": {
-      "anyOf": [
-        {
-          "type": "string"
-        },
-        {
-          "type": "null"
-        }
-      ],
-      "description": "Codex thread id of the worker, for inspection; continuation uses an opaque reference."
-    }
-  },
-  "required": [
-    "changeIntent",
-    "verdict",
-    "workerClaimedStatus",
-    "trustworthy",
-    "workerThreadId",
-    "continuationReference",
-    "model",
-    "effort",
-    "effortReason",
-    "attempt",
-    "summary",
-    "notes",
-    "followUps",
-    "filesChanged",
-    "verification",
-    "verificationMode",
-    "scopeViolations",
-    "discrepancies",
-    "reviewChecklist",
-    "escalationAdvice",
-    "durationSeconds",
-    "usage",
-    "errors"
-  ],
-  "type": "object"
-}New value: +null

Previous value: -"Optional concise label for local activity views; keep it short and useful (for example, 'Update auth retries'). It is persisted locally and may reveal this brief work description; omit it when that is not appropriate."New value: +"Optional concise, non-sensitive label for local activity views; parents should provide one for each batch task when a safe label is available (for example, 'Update auth retries'). It is persisted locally and may reveal this brief work description; omit it when that is not appropriate. Never derive it from the objective text."

Previous value: -"Declared workspace-relative glob scope, checked against observed edits after the run. Empty declares no in-workspace allowlist; workspace confinement remains."New value: +"Declared workspace-relative glob scope, checked against observed edits after the run. Empty declares no in-workspace allowlist and does not declare read-only intent; workspace confinement remains."

Added value: +{
+  "default": false,
+  "description": "Opt in to at most one automatic repair turn when the initial result is conservatively classified as a local verification defect. The same worker thread and immutable task contract are reused. Omitted defaults to false.",
+  "type": "boolean"
+}

Added value: +{
+  "default": "required",
+  "description": "Explicit file-change expectation: forbidden means read-only and any runtime-observed edit violates the contract; optional means edits may be useful but are not required; required means the task is expected to produce an edit. Omitted defaults to required for compatibility. This is independent of allowedFiles and taskCategory.",
+  "enum": [
+    "forbidden",
+    "optional",
+    "required"
+  ],
+  "type": "string"
+}

Added value: +{
+  "description": "Selected change intent carried into the review evidence.",
+  "enum": [
+    "forbidden",
+    "optional",
+    "required"
+  ],
+  "type": "string"
+}

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "description": "Opaque, single-use, server-lifetime reference for one explicit continuation; null when this result cannot be continued or the bound was consumed."
+}

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": false,
+      "properties": {
+        "attempted": {
+          "type": "boolean"
+        },
+        "classification": {
+          "enum": [
+            "not-requested",
+            "not-needed",
+            "local-verification",
+            "read-only",
+            "contract-or-requirement",
+            "scope-or-conflict",
+            "environment-or-tooling",
+            "security-or-trust-boundary",
+            "wider-scope"
+          ],
+          "type": "string"
+        },
+        "failureEvidence": {
+          "items": {
+            "additionalProperties": false,
+            "properties": {
+              "command": {
+                "type": "string"
+              },
+              "execution": {
+                "enum": [
+                  "argv",
+                  "shell"
+                ],
+                "type": "string"
+              },
+              "exitCode": {
+                "anyOf": [
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ]
+              },
+              "output": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "command",
+              "execution",
+              "exitCode",
+              "output"
+            ],
+            "type": "object"
+          },
+          "type": "array"
+        },
+        "reason": {
+          "type": "string"
+        },
+        "requested": {
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "requested",
+        "attempted",
+        "classification",
+        "reason",
+        "failureEvidence"
+      ],
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "description": "Bounded automatic-repair decision and the concise authoritative failure evidence supplied to the resumed worker. Null or omitted when not requested."
+}

Previous value: -[
-  {
-    "additionalProperties": false,
-    "properties": {
-      "cachedInputTokens": {
-        "type": "number"
-      },
-      "inputTokens": {
-        "type": "number"
-      },
-      "outputTokens": {
-        "type": "number"
-      },
-      "reasoningOutputTokens": {
-        "type": "number"
-      }
-    },
-    "required": [
-      "inputTokens",
-      "cachedInputTokens",
-      "outputTokens",
-      "reasoningOutputTokens"
-    ],
-    "type": "object"
-  },
-  {
-    "type": "null"
-  }
-]New value: +[
+  {
+    "additionalProperties": false,
+    "properties": {
+      "cacheWriteInputTokens": {
+        "type": "number"
+      },
+      "cachedInputTokens": {
+        "type": "number"
+      },
+      "inputTokens": {
+        "type": "number"
+      },
+      "outputTokens": {
+        "type": "number"
+      },
+      "reasoningOutputTokens": {
+        "type": "number"
+      }
+    },
+    "required": [
+      "inputTokens",
+      "cachedInputTokens",
+      "outputTokens",
+      "reasoningOutputTokens"
+    ],
+    "type": "object"
+  },
+  {
+    "type": "null"
+  }
+]

Added value: +{
+  "description": "Normalized worker-declared failure causes. This is claim evidence, not an orchestrator repair or retry classification. Current results always include it; the field is optional only for backwards-compatible consumers.",
+  "items": {
+    "enum": [
+      "verification",
+      "requirements",
+      "implementation",
+      "environment-tooling",
+      "timeout",
+      "blocked",
+      "unclassified"
+    ],
+    "type": "string"
+  },
+  "type": "array"
+}

Previous value: -"Codex thread id of the worker, for inspecting or resuming it."New value: +"Codex thread id of the worker, for inspection; continuation uses an opaque reference."

Previous value: -[
-  "verdict",
-  "workerClaimedStatus",
-  "trustworthy",
-  "workerThreadId",
-  "model",
-  "effort",
-  "effortReason",
-  "attempt",
-  "summary",
-  "notes",
-  "followUps",
-  "filesChanged",
-  "verification",
-  "verificationMode",
-  "scopeViolations",
-  "discrepancies",
-  "reviewChecklist",
-  "escalationAdvice",
-  "durationSeconds",
-  "usage",
-  "errors"
-]New value: +[
+  "changeIntent",
+  "verdict",
+  "workerClaimedStatus",
+  "trustworthy",
+  "workerThreadId",
+  "continuationReference",
+  "model",
+  "effort",
+  "effortReason",
+  "attempt",
+  "summary",
+  "notes",
+  "followUps",
+  "filesChanged",
+  "verification",
+  "verificationMode",
+  "scopeViolations",
+  "discrepancies",
+  "reviewChecklist",
+  "escalationAdvice",
+  "durationSeconds",
+  "usage",
+  "errors"
+]

Previous value: -"Observable, checkable conditions that define done — something you can confirm by reading the diff or running a command."New value: +"Observable conditions that define done and can be judged from evidence."

Added value: +{
+  "description": "Optional concise label for local activity views; keep it short and useful (for example, 'Update auth retries'). It is persisted locally and may reveal this brief work description; omit it when that is not appropriate.",
+  "maxLength": 80,
+  "minLength": 1,
+  "type": "string"
+}

Previous value: -"Glob patterns the worker may create or modify (e.g. 'src/auth/**'). Empty means unrestricted, which is discouraged. Enforced after the run."New value: +"Declared workspace-relative glob scope, checked against observed edits after the run. Empty declares no in-workspace allowlist; workspace confinement remains."

Previous value: -"Background the worker cannot infer from the repo: prior decisions, constraints, gotchas, relevant files."New value: +"Legacy plain-text task background. If contextCapsule is also supplied, both are sent; avoid duplication."

Added value: +{
+  "description": "Optional structured task background the worker cannot infer. It supplements the contract and legacy context; include only useful fields, omit empty fields, never copy the parent transcript, and do not duplicate other fields.",
+  "properties": {
+    "dependencies": {
+      "description": "Services, libraries, or internal modules the task depends on.",
+      "type": "string"
+    },
+    "interfaces": {
+      "description": "Signatures, contracts, or boundaries that must remain stable.",
+      "type": "string"
+    },
+    "invariants": {
+      "description": "Rules that must remain true.",
+      "type": "string"
+    },
+    "knownPitfalls": {
+      "description": "Task-specific mistakes or failed approaches to avoid.",
+      "type": "string"
+    },
+    "relevantContext": {
+      "description": "Task background the worker cannot infer from the repository.",
+      "type": "string"
+    },
+    "upstreamDecisions": {
+      "description": "Architecture or design decisions already settled by the parent orchestrator.",
+      "type": "string"
+    }
+  },
+  "type": "object"
+}

Previous value: -"Reasoning effort for the worker. medium = mechanical, high = default for real implementation work, xhigh = subtle or cross-cutting, max = genuinely hard problems only. Rate the DELEGATED TASK's own difficulty, never the parent project's importance."New value: +"Worker reasoning effort: medium = mechanical; high = bounded work needing judgement (routine default); xhigh = subtle, cross-cutting, or unclear cause; max = genuinely hard. Rate this task's difficulty, not project importance."

Previous value: -"One sentence justifying the effort in terms of this task's difficulty. Required so effort selection stays deliberate."New value: +"One sentence justifying the effort from this task's difficulty."

Previous value: -"Glob patterns the worker must not touch (e.g. 'package.json'). Takes precedence over allowedFiles. Forbid the test files when tests are the verification."New value: +"Workspace-relative globs observed edits must not match. Checked after the run and takes precedence over allowedFiles."

Previous value: -"Single bounded implementation task, written so a worker with no access to your conversation can execute it. State the what and the why."New value: +"One bounded executable task. Make the what, why, and expected outcome self-contained because the worker cannot see the conversation."

Previous value: -"Escalation history for this same objective. Supply it when re-delegating after a FAILED or BLOCKED result: the worker sees what already failed, and the orchestrator reports the attempt number back to you."New value: +"Prior FAILED or BLOCKED attempts at this objective, so a retry can avoid repeating them and the result can report its attempt number."

Added value: +{
+  "default": "full",
+  "description": "Choose compact routinely; it removes only successful verification output. Use full when that output is needed. The schema default remains full for backwards compatibility; failed, refused, and skipped output is retained.",
+  "enum": [
+    "full",
+    "compact"
+  ],
+  "type": "string"
+}

Previous value: -"Shape of the work. 'investigation' and 'bugfix' more often justify xhigh; 'chore' and 'tests' rarely do."New value: +"Kind of executable work; it does not determine effort."

Previous value: -"Wall-clock budget for the worker turn. Defaults to 1800."New value: +"Optional per-turn wall-clock budget; otherwise uses the configured default (normally 1800 seconds)."

Previous value: -"Shell-free commands proving the work (e.g. 'npm test', 'pytest -q'). The worker runs them AND the orchestrator independently re-runs them after the worker exits; the orchestrator's exit codes are authoritative. Only allowlisted executables run, and pipes/redirects/&&/; are refused."New value: +"Targeted deterministic checks that prove the bounded task; use a full suite only when the task genuinely requires it. The worker runs and reports them, and the orchestrator independently processes each under the configured policy. Executed orchestrator rows are authoritative, while refused or skipped rows prove nothing. Default allowlist mode refuses shell syntax."

Previous value: -"Absolute path the worker operates in. Defaults to the orchestrator's current working directory."New value: +"Absolute worker directory; defaults to the orchestrator's current directory."

Previous value: -"Concrete mismatches between the worker's claims and observed reality. Non-empty means do not accept the result as-is."New value: +"Concrete mismatches between claims and observed evidence. Non-empty means do not accept the result as-is."

Previous value: -"Union of edits observed by the Codex runtime and edits the worker claimed. `observed: false` means the runtime saw no such patch."New value: +"Union of runtime-observed and worker-claimed edits. observed: false means the runtime recorded no matching patch."

Previous value: -"What you, Sol, must still check yourself before accepting."New value: +"Risk-based checks the parent orchestrator must still make before accepting."

Previous value: -"Files touched outside allowedFiles, inside forbiddenFiles, or outside the workspace."New value: +"Observed edits outside allowedFiles, matching forbiddenFiles, or escaping the workspace. Non-empty requires deeper review."

Previous value: -"False when the worker's claim conflicts with observed evidence. False demands a careful diff review before accepting anything."New value: +"False when claims conflict with observed evidence or runtime errors occurred; scrutinize the result before accepting."

Previous value: -"Orchestrator's verdict, derived from independently re-run verification and scope checks — NOT copied from the worker's claim."New value: +"Orchestrator verdict from observed scope and configured verification; not copied from the worker's claim."

Previous value: -"Verification outcomes. Prefer `source: orchestrator` rows."New value: +"Verification outcomes with provenance and execution status; use orchestrator rows to determine what actually ran."

Previous value: -"How the orchestrator ran it. `argv` = no shell (normal). `rejected` = refused by policy and NOT run. `skipped` = verification disabled. `reported` = the worker's own claim, not executed here. Only argv/shell rows prove anything."New value: +"argv or shell = executed here; rejected = refused; skipped = disabled; reported = worker-only. Only successful executed rows prove a command."

Previous value: -"`orchestrator` results are ground truth."New value: +"Result provenance. Orchestrator rows authoritatively record execution, refusal, or skipping; worker rows are self-reported."