🆗 Overseer Kit — overseer-kit

Public product name: 🆗 Overseer Kit — overseer-kit is the repo slug only, not the public brand.

Living relay for 🆗 Overseer Kit. Paste the Paste-ready prompt fence into a fresh chat.

NEXT right now = OCI-a (Thinking, new branch/worktree). AFF-b is DONE: BV-r4 pass + ISR pass. Do not continue AFF on this branch.

NEXT SESSION — OCI-a Overseer context isolation freeze

Date: 2026-09-20
Current position: AFF-b DONE → OCI-a Model: Thinking

What just landed

THE ONE NEXT STEP — Model: Thinking

Freeze Overseer context isolation on a new dedicated branch/worktree. Do not reuse feat/adversarial-freeze-honesty-gate. Spec-only — no Auto.

Paste-ready prompt — OCI-a

OCI-a — Overseer context isolation freeze (overseer-kit).

Model: Thinking
Repo: overseer-kit
Step: OCI-a
Authority: authoritative
Posture: freeze WHAT/HOW; no Auto implementation

AFF-b is DONE (BV-r4 pass + ISR pass). Start this freeze on a new dedicated
branch/worktree: feat/overseer-context-isolation. Never reuse
feat/adversarial-freeze-honesty-gate.

Read first: docs/ROADMAP.md (OCI-a row); docs/OVERSEER-HANDOVER.md;
docs/OVERSEER-KIT-SPEC.md.

Verified problem (shared kit defect reported from Bornfree / VideoFactory /
Movie Maker):
- stable consumers can execute a live unfinished kit checkout
- inherited cwd can select the wrong repo
- default-lane fallback can inject another lane's NEXT

Freeze:
- stable vs development runtime identity
- consumer-lock compatibility
- repository-bound hooks using explicit -C
- fail-closed lane/window binding
- installer/upgrade rollback
- migration
- seven-tier coverage

Create a frozen: true artifact. Run /freeze-review-loop to pass. Do not start
Auto. Do not append adversarial_freeze in the author session.

Hard stops: No consumer sync · no launcher replacement · no Bornfree /
VideoFactory edit · no merge to main without Tier 3 · no secrets · no live
posture flips · no Auto implementation during Thinking

Shared context (canonical — prepend only when paste fence omits it)

Verified snapshot

VCS (verified 2026-09-20)

Hard stops (unchanged)

• No merge to main without Tier 3 authorization
• No live capability / posture gate flips without Tier 3 authorization
• No secrets in commits, adapters, logs, or governance docs
• Governance sync is mandatory before session end (SD-17)
• OCI-a: new branch/worktree; no consumer sync; no launcher replacement

• 2026-09-20 — AFF-b-ISR → pass; AFF-b → DONE. Independent verifier cc0054de-21be-4972-ac80-22822646e805 ≠ producer d7f82f3d… ≠ BV-r4 969C4CFD…. Re-derived stamp sha256:5b8a9aa5…; V1–V8 clean; test_aff_ 101 (test_output sha256:89b76e1c…). Confirmed Mode B evidence f95fe2b5…. Appended independent_second_review pass round 4, entry a069d8ad…. Mode D → 0. NEXT → OCI-a (Thinking, new branch/worktree). No OCI-a start in this chat. No merge.

• 2026-09-20 — AFF-b-BV-r4 → pass; AFF-b remains WIP pending ISR. Independent verifier 969C4CFD-BD3F-43E7-9A51-2CBED235C114 re-derived stamp sha256:5b8a9aa5…; V1–V8 clean; BV3-M1/M2 closed on real render_paste_ready. Seven-tier test_aff_ 101 passed (test_output sha256:d47e56e52e81c53baf71813ef360beb27bd239ccda222b63c58e87e58047697e). Full suite 1480 passed / 15 pre-existing failures; all 15 reproduced on parent ebaf518. Appended verification_evidence pass round 4, entry f95fe2b5…. No ISR, no DONE, no OCI-a, no merge. NEXT → AFF-b-ISR.

• 2026-09-20 — AFF-b-FIX complete; AFF-b remains WIP. Closed BV-r3 BV3-M1–M2 only: adversarial paste pass instruction emits full §AFF.5.2 field set; e2e asserts exact “The kit performs no model call and holds no key.” and the complete pass-field instruction from render_paste_ready. Seven tiers: 101 passed (test_output sha256:9aac8ce3aca73de15887fc9901d4b77d65260b4b7a1e69463a6ab449c0f06ff8). Fixer producer_session_id d7f82f3d-9259-42cf-bd61-e32193d71c0a. No verification_evidence/ISR pass; no DONE; no auto_may_start: true; no merge. NEXT → AFF-b-BV (fresh Thinking chat), then ISR.

• 2026-09-20 — AFF-b-BV-r3 → findings; AFF-b remains WIP. Independent verifier A3FD0F5F-AD08-43A0-B262-C5F7E81DDF02. V3 failed: paste pass instruction omitted §AFF.5.2 fields (actor_role, actor_session_id, phase_id, round, reviewer_model); e2e asserted incomplete no-key sentence and did not assert the complete pass-field instruction. No verification_evidence/ISR pass. NEXT → AFF-b-FIX (cited lines only). No DONE. No OCI-a. No merge.

• 2026-09-20 — AFF-b-FIX complete; AFF-b remains WIP. Closed BV-r2 V3 only: §AFF.7.2 paste/render_next_session assertions complete; suggest+absent public ok status --json --exit-code restored (state: absent, exact §AFF.9 warning) with governance-sync retained. Seven tiers: 101 passed (test_output sha256:1bbccffea4cd7370e81c1b59bfefa9a2558239ef89fead6c51c2c530343aa575). Fixer producer_session_id 70B57C08-5CDD-476B-AB5D-ACDDA6FC6B22. No verification_evidence/ISR pass; no DONE; no auto_may_start: true; no merge. NEXT → AFF-b-BV (fresh Thinking chat), then ISR.

• 2026-09-20 — AFF-b-BV-r2 → findings; AFF-b remains WIP. Independent verifier re-derived stamp sha256:5b8a9aa5… and reproduced test_aff_ 101 green (test_output sha256:2714f0c2bb53db8b986d4c0503f8a07994be246c2ac83132bd96916c4e470e92). V1/V2/V4–V7 clean for Mode E CLI, require ok status --json --exit-code, governance-sync footer, two-row + Thinking → Auto split, exact type(v) is int / non-blank ts / type(round) is int, no secrets, no auto_may_start: true. V3 failed: paste test still omits several §AFF.7.2 bullets (including render_next_session); suggest+absent public status JSON was dropped. No verification_evidence/ISR pass. NEXT → AFF-b-FIX (cited lines only). No DONE. No OCI-a. No merge.

• 2026-09-20 — AFF-b-FIX complete; AFF-b remains WIP. Repaired exactly BV-r1's public-path coverage gaps. New test_aff_ coverage executes ok status --json --exit-code and governance-sync, Mode-E CLI parser/command wiring, the frozen Thinking → Auto split, and all §AFF.7.2 adversarial paste requirements. The require-mode governance footer now emits its fail-closed message and returns 2. Seven tiers: 101 passed (test_output sha256:17b3cb961cade1cbe06a7ac12efd8d7c11fba2196b71a094c3bd8add7d4a33ac). Full suite by test-directory partition: 1100 passed / 7 pre-existing non-AFF failures; the recorded historical 15-failure baseline was not reproducible in this checkout. Fixer producer_session_id 245D25BC-C44E-4995-9687-03422D0DAB92. No verification_evidence/ISR pass appended; no DONE; no auto_may_start: true; no merge. NEXT → AFF-b-BV (fresh Thinking chat), then ISR.

• 2026-09-20 — AFF-b-BV-r1 → findings; AFF-b remains WIP. Independent verifier reproduced seven-tier test_aff_ 100 green (test_output sha256:24051cf4…) and full suite 1479 passed / 15 pre-existing failures. Static/runtime V1–V2 and V4–V8 were clean, including exact type(v) is int, non-blank ts, exact type(round) is int, no secrets, and no auto_may_start: true. V3 failed: helper-only status test did not execute ok status --exit-code or governance-sync; no AFF test exercised Mode-E CLI parsing/command wiring; frozen Thinking → Auto split e2e was absent; and the adversarial NEXT assertion did not prove all §AFF.7.2 requirements. No verification-evidence pass or ISR pass appended. NEXT → AFF-b-FIX. OCI-a context isolation queued after AFF-b DONE on a new branch/worktree; do not bundle it into AFF.

• 2026-09-20 — AFF-b Auto code complete (not DONE). Built §AFF.2–§AFF.14 / §AFF.16: ledger kind adversarial_freeze, Mode E exit 40, NEXT Trigger A/B + adversarial paste, status/governance-sync adversarial_freeze_gate, twin skill docs/ADVERSARIAL-FREEZE-REVIEW.md + /adversarial-freeze-review, dogfood adversarial_freeze: suggest, shared envelope (type(v) is int, non-blank ts) + type(round) is int on all round-bearing kinds + AFF resolver. test_aff_ 100 green (test_output sha256:b64bac0e…). Producer nonce AED44535-4E5B-4F56-BA72-81B44E222C16. Circular-import fix committed (d8cffc6). No auto_may_start: true. No model dispatch. No merge. NEXT → AFF-b-BV (Thinking, second chat) then ISR (require).

• 2026-09-20 — AFF-ADV-r5 → pass; AFF-a DONE. Mechanical restamp sha256:5b8a9aa5…. Reviewer nonce aff-adv-r5-2026-09-20 ≠ author aff-a-author-fix-r4-2026-09-20. NEXT was AFF-b (Auto).

• 2026-09-20 — AFF-r7 author repair → pass (AFF-a still WIP). Closed ADV4-M1–M2. Mechanical stamp sha256:04dda1dc….

• 2026-09-20 — AFF-ADV-r4 → findings (AFF-a still WIP). ADV4-M1–M2 recorded.

• 2026-09-20 — AFF-r6 author repair → pass (AFF-a still WIP). Closed ADV3-M1–M3.

• 2026-09-20 — AFF-ADV-r3 → findings (AFF-a stays WIP). ADV3-M1–M3 recorded.

• 2026-09-20 — AFF-r5 author repair → pass (AFF-a still WIP). Closed ADV2 findings.

• Older entries: docs/archive/handover/CHANGE-LOG.md

Handover regeneration rules (SD-3, SD-17)

1. Docs-first: update docs/ROADMAP.md and durable specs before regenerating this file.
2. Model label required: every NEXT block and paste prompt includes Model:.
3. Thinking → Auto split: when NEXT is split, emit {step}a (Thinking) then {step}b (Auto) — never one combined prompt.
4. Build verification (mandatory): after {step}b, run /build-verification-review before ROADMAP status → DONE.
5. Closing commit: the session-ending commit bundles code/tests + docs/ROADMAP.md + docs/OVERSEER-HANDOVER.md.
6. Change log compaction: living change log keeps the newest 15 dated bullets via ok handover-compact --write.

What just landed

Change log

• 2026-09-20 — AFF-b-ISR → pass; AFF-b → DONE. Independent test_aff_ 101 (sha256:89b76e1c…); ISR entry a069d8ad…. NEXT → OCI-a (new branch/worktree).

• 2026-09-20 — AFF-b-BV-r4 → pass; AFF-b remains WIP. test_aff_ 101 (sha256:d47e56e…); evidence f95fe2b5…; full-suite 15/15 failures reproduced on parent. NEXT → AFF-b-ISR.

• 2026-09-20 — AFF-b-FIX complete; AFF-b remains WIP. Closed BV-r3 BV3-M1–M2; test_aff_ 101 (sha256:9aac8ce3…). NEXT → AFF-b-BV.

• 2026-09-20 — AFF-b-BV-r3 → findings; AFF-b remains WIP. Verifier A3FD0F5F…. V3: incomplete §AFF.5.2 pass fields + incomplete no-key e2e. NEXT → AFF-b-FIX.

• 2026-09-20 — AFF-b-FIX complete; AFF-b remains WIP. Closed BV-r2 V3; test_aff_ 101 (sha256:1bbccffe…). NEXT → AFF-b-BV.

• 2026-09-20 — AFF-b-BV-r2 → findings; AFF-b remains WIP. Independent test_aff_ 101 (sha256:2714f0c2…). V3: incomplete §AFF.7.2 assertions + dropped suggest+absent status JSON. NEXT → AFF-b-FIX.

• 2026-09-20 — AFF-b-FIX (BV-r1) repaired public status/governance-sync, Mode-E CLI, and Thinking → Auto split. test_aff_ 101. NEXT was AFF-b-BV.

• 2026-09-20 — AFF-b-BV-r1 → findings; AFF-b remains WIP. Independent test_aff_ 100; full suite 1479 / 15 pre-existing. NEXT → AFF-b-FIX. OCI-a queued separately after AFF closes.

• 2026-09-20 — AFF-b Auto code complete (not DONE). test_aff_ 100; producer AED44535…; NEXT → AFF-b-BV then ISR. No DONE, no merge, no auto_may_start: true.

• 2026-09-20 — AFF-ADV-r5 → pass; AFF-a DONE. Mechanical restamp sha256:5b8a9aa5…. NEXT was AFF-b (Auto).

• 2026-09-20 — AFF-r7 author repair → pass; AFF-a remains WIP. NEXT was AFF-ADV-r5.

• 2026-09-20 — AFF-ADV-r4 → findings; AFF-a remains WIP. ADV4-M1–M2 recorded.

• 2026-09-20 — AFF-r6 author repair → pass; AFF-a remains WIP.

• 2026-09-20 — AFF-ADV-r3 → findings; AFF-a remains WIP.

• 2026-09-20 — AFF-r5 author repair → pass; AFF-a remains WIP.