diff --git a/.claude-plugin/marketplace.base.json b/.claude-plugin/marketplace.base.json
index ed3af3b5..5425de16 100644
--- a/.claude-plugin/marketplace.base.json
+++ b/.claude-plugin/marketplace.base.json
@@ -9,7 +9,7 @@
   "plugins": [],
   "metadata": {
     "description": "Agent collaboration plugin marketplace",
-    "version": "7.0.8",
+    "version": "7.0.9",
     "repository": "https://github.com/sumitake/agent-collab"
   }
 }
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index b1415335..f7513672 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -10,7 +10,7 @@
     {
       "name": "agent-collab",
       "description": "Unified collaboration package with semantic actions, source-grounded context, empirical project estimation, and a verified plugin-relative direct native runtime.",
-      "version": "7.0.8",
+      "version": "7.0.9",
       "author": {
         "name": "John Osumi"
       },
@@ -34,7 +34,7 @@
   ],
   "metadata": {
     "description": "Agent collaboration plugin marketplace",
-    "version": "7.0.8",
+    "version": "7.0.9",
     "repository": "https://github.com/sumitake/agent-collab"
   }
 }
diff --git a/README.md b/README.md
index c651f717..fe5dffe1 100644
--- a/README.md
+++ b/README.md
@@ -5,9 +5,11 @@ compatible hosts. The package pairs a routing-only public client with the
 co-packaged direct native runtime. Callers choose logical work; provider output
 remains opaque content for the calling agent to interpret.
 
-This public repository's current source is **agent-collab** (v7.0.8).
+This public repository's current source is **agent-collab** (v7.0.9).
 
 Current published release: **7.0.8** ([`v7.0.8`](https://github.com/sumitake/agent-collab/releases/tag/v7.0.8)).
+The v7.0.8 closeout is recorded in the
+[dated evidence snapshot](docs/architecture/status-and-evidence.md).
 It carries signed provider runtime `5.0.9`. Host installation, readiness, and
 provider availability remain separate evidence planes. The package README
 remains the immutable release-time snapshot; current postpublication facts
@@ -21,23 +23,30 @@ machine-operational contract for the repository source. The dated
 records the completed publication and keeps repository, tag, release,
 installation, and readiness claims separate.
 
-## What's new - v7.0.8
-
-Release 7.0.8 carries runtime `5.0.9`. A request whose effort is below an
-action's required floor is now raised to the lowest admitted class instead of
-failing before any provider starts, and the raised effort is reported in the
-terminal result when it happens. An unsupported explicitly named logical agent now
-reports a distinct, stable reason instead of a generic failure.
-
-The coordinator now repairs a small class of request-construction mistakes
-before dispatch and reports each repair it made. A read-only repository
-action whose request omits the caller's repository is bound to the caller's
-own repository (or a linked worktree of it that the request names); a
-request that names only some other directory is rejected before dispatch.
-
-Both macOS architectures are signed, notarized, and published together. The
-[dated evidence](docs/architecture/status-and-evidence.md) separates staged
-qualification, review, and installed-instance evidence from this snapshot.
+## What's new - v7.0.9
+
+The staged 7.0.9 package includes signed and notarized provider runtime
+`5.0.12` for both macOS architectures. Worker guidance distinguishes expected
+task time from the runtime's admitted-progress inactivity lease, which defaults
+to 24 hours when omitted. It shows callers how to choose a bound, retain
+partial work when stopping, and use primary-owned validation or a specific
+preverified interpreter. Review guidance asks for exact, version-matched
+evidence before reporting an external API blocker. Runtime 5.0.12 adds bounded
+optional hints for some native Agy startup failures without changing request
+status or returned content. OpenCode 2 compatibility uses plain ACP startup and
+checks model availability without creating a session or sending a prompt.
+Routes and admissions remain unchanged; Claude is
+admitted only for document intent.
+
+The package includes a fresh version-bound project-estimation bootstrap. Its
+pricing snapshot covers the configured model records; unknown models remain
+unpriced and numeric quotas remain unknown. Bootstrap calibration warnings are
+retained.
+
+The published 7.0.8 release and its runtime `5.0.9` remain the current release
+until the staged candidate passes qualification, is merged, and is published.
+The [dated evidence](docs/architecture/status-and-evidence.md) keeps staged
+qualification, review, publication, and installed-instance evidence separate.
 
 For earlier release history, see the full [CHANGELOG](CHANGELOG.md).
 
@@ -126,17 +135,17 @@ size-branded source or generated skill surface is supported.
 ## Runtime trust boundary
 
 The canonical workspace build owns the final binary and generated manifest.
-The 7.0.8 release carries:
+The staged 7.0.9 package carries:
 
 - manifest schema 4;
 - runtime protocol 5;
 - native manifest contract 4;
-- provider runtime version `5.0.9`;
+- provider runtime version `5.0.12`;
 - one top-level closed `wire_contract` plus canonical
   `wire_contract_sha256`, bound into each artifact record; and
 - wire schema 12 with 12 logical actions and per-action timeout modes.
 
-Both macOS architectures carry the imported signed and notarized 5.0.9
+Both macOS architectures carry the imported signed and notarized 5.0.12
 artifact set. Wire schema 12 is unchanged.
 
 Production provider work uses admitted progress inactivity so active work is
diff --git a/changelog.d/2026-10-18-001-worker-review-runtime-diagnostics.md b/changelog.d/2026-10-18-001-worker-review-runtime-diagnostics.md
new file mode 100644
index 00000000..a2a38d92
--- /dev/null
+++ b/changelog.d/2026-10-18-001-worker-review-runtime-diagnostics.md
@@ -0,0 +1,23 @@
+### agent-collab 7.0.9 — runtime 5.0.12
+
+#### Changed
+- Worker guidance distinguishes expected task duration from the configured
+  inactivity bound and keeps cancellation, partial work, cleanup, and provider
+  status separate. Validation stays primary-owned unless a focused worker
+  check has an exact preverified interpreter.
+- Review guidance grounds external API blockers in the exact called method and
+  relevant version, and identifies uncertainty when that evidence is missing.
+- Runtime 5.0.12 improves diagnostics for certain Gemini startup failures
+  without changing request status or returned content.
+- Add OpenCode 2 compatibility with clearer readiness reporting.
+- Keep existing routing eligibility and public request/response contracts.
+- Refresh version-bound project-estimation bootstrap data, retaining calibration
+  warnings and unknown numeric quotas. Pricing covers exact configured models
+  without borrowing prices for unknown models.
+
+#### Why
+- Make bounded delegation predictable, reduce worker time spent searching for
+  unavailable test environments, and prevent review findings from encoding an
+  unsupported SDK contract.
+- Make startup failures easier to diagnose while preserving existing routing
+  and returned content.
diff --git a/docs/migration-from-legacy-packages.md b/docs/migration-from-legacy-packages.md
index 1de3cc73..63f1a5cb 100644
--- a/docs/migration-from-legacy-packages.md
+++ b/docs/migration-from-legacy-packages.md
@@ -27,10 +27,13 @@ The provider-free report distinguishes active, installed, and cached legacy
 observations. Active retired packages block direct routing. Cache-only residue
 does not become an executable route.
 
-The current source package unit is manifest schema 4, runtime protocol 5,
-native contract 4, provider runtime `5.0.9`, and descriptor schema 12. The generated
-manifest carries one top-level `wire_contract` and
-`wire_contract_sha256`. A mixed unit fails typed.
+The staged 7.0.9 package includes signed and notarized runtime `5.0.12` for
+macOS arm64 and x86_64, with manifest schema 4, runtime protocol 5, native
+contract 4, and descriptor schema 12. Publication and installation evidence
+for the staged package will be recorded separately in the repository README
+and architecture handbook after those gates complete. The generated manifest
+carries one top-level `wire_contract` and `wire_contract_sha256`. A mixed unit
+fails typed.
 
 No broker, socket, plist, selector, lane, launchd job, installed runtime copy,
 or setup lifecycle is required. Do not restore a retired provider package as a
diff --git a/plugins/agent-collab/.claude-plugin/plugin.json b/plugins/agent-collab/.claude-plugin/plugin.json
index a8e8a767..1d8242e2 100644
--- a/plugins/agent-collab/.claude-plugin/plugin.json
+++ b/plugins/agent-collab/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "agent-collab",
-  "version": "7.0.8",
+  "version": "7.0.9",
   "description": "Unified collaboration package with semantic agent actions, source-grounded context, and a verified plugin-relative direct native runtime.",
   "author": {
     "name": "John Osumi"
diff --git a/plugins/agent-collab/.codex-plugin/plugin.json b/plugins/agent-collab/.codex-plugin/plugin.json
index f8337f6a..144a1d83 100644
--- a/plugins/agent-collab/.codex-plugin/plugin.json
+++ b/plugins/agent-collab/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "agent-collab",
-  "version": "7.0.8",
+  "version": "7.0.9",
   "description": "Unified collaboration package with semantic agent actions, source-grounded context, and a verified plugin-relative direct native runtime.",
   "author": {
     "name": "John Osumi"
diff --git a/plugins/agent-collab/README.md b/plugins/agent-collab/README.md
index ced1c356..4b2a2bae 100644
--- a/plugins/agent-collab/README.md
+++ b/plugins/agent-collab/README.md
@@ -6,30 +6,41 @@ they never choose a provider transport, model, binary, socket, lane, or
 lifecycle command. Provider final content is opaque to the runtime and is
 interpreted by the calling agent with ordinary reasoning.
 
-Current repository source: **7.0.8**
-
-Current published release: **7.0.7**
-([`v7.0.7`](https://github.com/sumitake/agent-collab/releases/tag/v7.0.7)); it
-carries signed provider runtime `5.0.8`. Host installation, readiness, and
-provider availability remain separate evidence planes.
-
-Version 7.0.8 prepares provider runtime `5.0.9` with manifest schema 4,
-runtime protocol 5, native contract 4, and wire schema 12. The descriptor
-admits 12 logical actions and eight logical agents. The public coordinator is
-a bounded routing-only shim. Provider-authored schema, verdict, findings,
-receipt, telemetry, and terminal-wrapper fields are not content-availability
-gates. Every bounded observed nonempty final or recovered
-partial remains available to the caller.
-
-The 7.0.8 source raises a request's effort to the lowest class an action
-admits instead of failing before any provider starts, and reports that
-adjustment in the terminal result when it happens; an unsupported explicitly
-named provider now reports a distinct, stable reason. It also repairs a small
-class of request-construction mistakes before dispatch — including binding an
-unbound read-only repository action to the caller's own repository or a named
-linked worktree of it — and reports each repair made, rejecting a request
-that names only some other directory before dispatch. Production publication
-remains pending.
+Package version: **7.0.9**
+
+This package includes signed and notarized provider runtime `5.0.12` for macOS
+arm64 and x86_64, with manifest schema 4, runtime protocol 5, native contract 4,
+and wire schema 12. The descriptor admits 12 logical actions and eight logical
+agents. The public coordinator is a bounded routing-only shim.
+Provider-authored schema, verdict, findings, receipt, telemetry, and
+terminal-wrapper fields are not content-availability gates. Every bounded
+observed nonempty final or recovered partial remains available to the caller.
+
+Worker guidance sets an inactivity bound, distinguishes it from expected task
+duration, and defines the primary's validation handoff. Review guidance requires
+exact method-level evidence for external API blockers. Runtime 5.0.12 adds
+bounded optional hints for some native Agy startup failures while leaving
+request status and content semantics unchanged. OpenCode 2 compatibility uses
+plain ACP startup and checks model availability without creating a session or
+sending a prompt. Carrier bindings and route
+admissions remain unchanged; Claude is admitted only for document intent.
+
+The included project-estimation data is a fresh version-bound bootstrap with
+its calibration warnings retained. Prices cover configured model records only;
+unknown models remain unpriced and numeric quotas remain unknown.
+
+This README records the package contract. Current publication, installation,
+and host-session evidence belongs in the repository README and architecture
+handbook; installation, readiness, and provider availability are separate
+observations.
+
+The 7.0.8 source raises a request's effort to the lowest class an action admits
+and reports the adjustment; an unsupported explicitly named provider reports
+a distinct, stable reason. It also repairs a small class of request-construction
+mistakes before dispatch, including binding an unbound read-only repository
+action to the caller's own repository or a named linked worktree of it. Each
+repair is reported; a request naming only some other directory is rejected
+before dispatch.
 
 The 7.0.7 source preserves canonical native HOME and SSH context, bounded
 recovery, and optional native model observations with their scope. Reviewer
@@ -59,9 +70,6 @@ General users should start with the public
 
 ## Skills
 
-The source includes signed and notarized runtime 5.0.9 and wire schema 12
-for both macOS architectures. Publication remains pending.
-
 The package ships 53 generated skills. Their `SKILL.md` files are the
 authoritative invocation contracts; the
 [capability map](../../docs/architecture/capabilities-and-workflows.md) groups
@@ -252,8 +260,8 @@ review.repository
 
 ## Direct runtime boundary
 
-The package emits one schema-4 manifest with wire schema 12, runtime protocol
-5, native contract 4, and provider runtime `5.0.9`. The final manifest binds the
+The package source targets one schema-4 manifest with wire schema 12, runtime
+protocol 5, native contract 4, and provider runtime `5.0.12`. The final manifest binds the
 canonical wire digest and one signed/notarized standalone bundle for each
 supported macOS architecture (`arm64` and `x86_64`).
 
diff --git a/plugins/agent-collab/project-estimation-data/aggregate-prior.json b/plugins/agent-collab/project-estimation-data/aggregate-prior.json
index f1d5059d..47540079 100644
--- a/plugins/agent-collab/project-estimation-data/aggregate-prior.json
+++ b/plugins/agent-collab/project-estimation-data/aggregate-prior.json
@@ -1 +1 @@
-{"calibration_state":"bootstrap","estimator_method_version":"empirical-v3","excluded_observation_count_floor":1940,"exclusion_count_rounding":"floor_to_public_k","generated_date":"2026-09-24","limitations":["actual_marginal_cash_unavailable","bootstrap_descriptive_only","greenfield_prior_unavailable","informational_backtest_below_policy","quota_delay_prior_unavailable","rework_review_prior_unavailable","token_prior_unavailable","wait_class_prior_unavailable"],"nodes":[{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"project_type.enhancement","generated_date":"2026-09-24","hierarchy_node":"h2.f9c0dc358bece64b.cb-merged","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"h2.f9c0dc358bece64b.cb-merged","generated_date":"2026-09-24","hierarchy_node":"h3.ee07c00dc4194839.rc-workspace","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"h3.ee07c00dc4194839.rc-workspace","generated_date":"2026-09-24","hierarchy_node":"h4.02f3f5734dfa4389.pm-unknown","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"h4.02f3f5734dfa4389.pm-unknown","generated_date":"2026-09-24","hierarchy_node":"h5.0271ef33616a9922.si-s0-i0","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"h5.0271ef33616a9922.si-s0-i0","generated_date":"2026-09-24","hierarchy_node":"h6.491830f3876dd460.risk-unknown","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"h6.491830f3876dd460.risk-unknown","generated_date":"2026-09-24","hierarchy_node":"h7.90c2ff5c98a8249b.burden-ordinary","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"h7.90c2ff5c98a8249b.burden-ordinary","generated_date":"2026-09-24","hierarchy_node":"h8.f0143afc84120883.ep-e0-unknown","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":"h8.f0143afc84120883.ep-e0-unknown","generated_date":"2026-09-24","hierarchy_node":"h9.f4963e420b65c022.orch-single","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"67c22fc777631d423e76e519a9f5b46f34a724c94925ebda1b9e4bc68ea7c3a3","calibration_quality":{"holdout_count":150,"p80_coverage_basis_points":5733,"p95_coverage_basis_points":9066},"drift_indicators":{"duration_drift_basis_points":7500,"token_drift_basis_points":0},"effective_sample_size":523,"estimator_method_version":"empirical-v3","fallback_parent":null,"generated_date":"2026-09-24","hierarchy_node":"project_type.enhancement","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":598,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2144,"p95":5646,"phase":"overall"}],"release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","sample_count":598,"schema_version":1,"source_cutoff_date":"2026-09-24","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}}],"policy_sha256":"c564c71c8c69baae0f51afa381f7adb4f912acbf7ac40e265138436a35b248b5","policy_version":"2026-08-21.1","schema_version":2,"seed":0,"source_cutoff_date":"2026-09-24","source_manifest_sha256":"e461663d2b3a234d259ca7cca857ecd605a0a99ff002309bf6c5ed9d2707537f"}
\ No newline at end of file
+{"calibration_state":"bootstrap","estimator_method_version":"empirical-v3","excluded_observation_count_floor":1940,"exclusion_count_rounding":"floor_to_public_k","generated_date":"2026-10-19","limitations":["actual_marginal_cash_unavailable","bootstrap_descriptive_only","greenfield_prior_unavailable","informational_backtest_below_policy","quota_delay_prior_unavailable","rework_review_prior_unavailable","token_prior_unavailable","wait_class_prior_unavailable"],"nodes":[{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"project_type.enhancement","generated_date":"2026-10-19","hierarchy_node":"h2.f9c0dc358bece64b.cb-merged","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"h2.f9c0dc358bece64b.cb-merged","generated_date":"2026-10-19","hierarchy_node":"h3.ee07c00dc4194839.rc-workspace","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"h3.ee07c00dc4194839.rc-workspace","generated_date":"2026-10-19","hierarchy_node":"h4.02f3f5734dfa4389.pm-unknown","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"h4.02f3f5734dfa4389.pm-unknown","generated_date":"2026-10-19","hierarchy_node":"h5.0271ef33616a9922.si-s0-i0","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"h5.0271ef33616a9922.si-s0-i0","generated_date":"2026-10-19","hierarchy_node":"h6.491830f3876dd460.risk-unknown","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"h6.491830f3876dd460.risk-unknown","generated_date":"2026-10-19","hierarchy_node":"h7.90c2ff5c98a8249b.burden-ordinary","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"h7.90c2ff5c98a8249b.burden-ordinary","generated_date":"2026-10-19","hierarchy_node":"h8.f0143afc84120883.ep-e0-unknown","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":"h8.f0143afc84120883.ep-e0-unknown","generated_date":"2026-10-19","hierarchy_node":"h9.f4963e420b65c022.orch-single","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}},{"aggregate_sha256":"78ba3eca7841a00bb57256c604af96006c589d25213cde20869ef13a0edcfb61","calibration_quality":{"holdout_count":151,"p80_coverage_basis_points":5761,"p95_coverage_basis_points":8741},"drift_indicators":{"duration_drift_basis_points":7280,"token_drift_basis_points":0},"effective_sample_size":525,"estimator_method_version":"empirical-v3","fallback_parent":null,"generated_date":"2026-10-19","hierarchy_node":"project_type.enhancement","metric_support":{"actual_marginal_cash":{"eligible_count":0,"status":"unavailable"},"focused_duration":{"eligible_count":600,"status":"published"},"quota_delay":{"eligible_count":0,"status":"unavailable"},"rework_review":{"eligible_count":0,"status":"unavailable"},"token_usage":{"eligible_count":0,"status":"unavailable"},"wait_class":{"eligible_count":0,"status":"unavailable"}},"phase_duration_quantiles":[{"p50":956,"p80":2130,"p95":5397,"phase":"overall"}],"release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","sample_count":600,"schema_version":1,"source_cutoff_date":"2026-10-19","source_eras":["unknown"],"uncertainty_floors":{"duration_basis_points":0,"token_basis_points":0}}],"policy_sha256":"c564c71c8c69baae0f51afa381f7adb4f912acbf7ac40e265138436a35b248b5","policy_version":"2026-08-21.1","schema_version":2,"seed":0,"source_cutoff_date":"2026-10-19","source_manifest_sha256":"cea052aa1c3aed761519ea16d00d13bdf9b21b47a236923945e14aaa7d07f91f"}
\ No newline at end of file
diff --git a/plugins/agent-collab/project-estimation-data/maintenance-receipt.json b/plugins/agent-collab/project-estimation-data/maintenance-receipt.json
index fe84eb27..fe12c66f 100644
--- a/plugins/agent-collab/project-estimation-data/maintenance-receipt.json
+++ b/plugins/agent-collab/project-estimation-data/maintenance-receipt.json
@@ -1 +1 @@
-{"backtest_outcome":{"baseline_duration_comparison":"not_applicable","baseline_token_comparison":"not_applicable","evaluation_mode":"informational","policy_result":"not_required","warning_codes":["duration_drift","insufficient_complete_token_training:enhancement","missing_training_root:greenfield","p80_coverage"]},"calibration_baseline_receipt_sha256":null,"calibration_candidate_sha256":"81dfa41ed1a3e0cfb9af9a6ce9f1014b0cf5b10af046c6ae8bacdfb5b24b6f3d","calibration_policy_sha256":"c564c71c8c69baae0f51afa381f7adb4f912acbf7ac40e265138436a35b248b5","calibration_policy_version":"2026-08-21.1","calibration_source_receipt_sha256":null,"calibration_state":"bootstrap","calibration_status":"fresh","collection_cutoff_date":"2026-09-24","collection_result_sha256":"7a58face718296110a8f22e104581dfc5ff47bd3c179d11f22e44c811c1050f4","completion_evidence_scope":"github_merged_or_earlier","estimator_method_version":"empirical-v3","generated_date":"2026-09-24","inventory":[{"name":"aggregate-prior.json","sha256":"20b7e0fc6b74e77d4f298546df67ec25014c89fbb49c8bf5b6df6a045042cd0a","size":11612},{"name":"operator-notification.json","sha256":"0c5fd374f0f4fc928f51e7c7eeb35e9a5715063ca89af2ca8f5d50c7187df0dc","size":622},{"name":"pricing-snapshot.json","sha256":"12654f8d325446da2b8423abc3310e5b325ac9831e4eb002b0ed4aeeb08fe2ed","size":10988},{"name":"quota-snapshot.json","sha256":"7bd4d4d5fe88303d759a995f9a5b90484b7c4bc87d017d928a0b8ad33a800778","size":1726}],"linkage_manifest_sha256":"e023c78b060214cf1a12927a3803f4a1a29a8721b5daadf030e3e5c02b15f307","notification_result":"delivered","original_calibration_date":"2026-09-24","pricing_material_unpriced_threshold_basis_points":1000,"pricing_policy_sha256":"ea78f732a3d5a39776b079abde7f900e214ac8afdbd4a281a5b78d3e175a8514","pricing_policy_version":"2026-09-06.1","pricing_registry_sha256":"b251b39dff588f6157bacace35a0387c64ab728154713bc26908f4ed57214436","pricing_result_sha256":"12654f8d325446da2b8423abc3310e5b325ac9831e4eb002b0ed4aeeb08fe2ed","quota_registry_sha256":"5bbe76aab29f42ee1bc9a97e1d6efb07d7eeee5311695e7de58b8b393c6edd0b","quota_result_sha256":"7bd4d4d5fe88303d759a995f9a5b90484b7c4bc87d017d928a0b8ad33a800778","receipt_sha256":"de72a7b52d1a63c369c7034483d24a39cac85f273d77589f6645222d855dc0b9","release_manifest_sha256":"9f02bfb59c152060df79e1f3b3845ce677bb8cdfc5d91b426cb85ba705f1f021","repository_sha256":"76e43252df48d7ab34f570741f2b8db8a2dee871ac50d8b8fc2155f6edb4ced2","schema_version":3,"seed":0,"source_cutoff_date":"2026-09-24","source_manifest_sha256":"e461663d2b3a234d259ca7cca857ecd605a0a99ff002309bf6c5ed9d2707537f","version":"7.0.8"}
\ No newline at end of file
+{"backtest_outcome":{"baseline_duration_comparison":"not_applicable","baseline_token_comparison":"not_applicable","evaluation_mode":"informational","policy_result":"not_required","warning_codes":["duration_drift","insufficient_complete_token_training:enhancement","missing_training_root:greenfield","p80_coverage","p95_coverage"]},"calibration_baseline_receipt_sha256":null,"calibration_candidate_sha256":"985ad9db386ff74332ac9a2e9838caac328f3f33029422a4e8952f295326cf63","calibration_policy_sha256":"c564c71c8c69baae0f51afa381f7adb4f912acbf7ac40e265138436a35b248b5","calibration_policy_version":"2026-08-21.1","calibration_source_receipt_sha256":null,"calibration_state":"bootstrap","calibration_status":"fresh","collection_cutoff_date":"2026-10-19","collection_result_sha256":"8a248f2d47541a33f946d57553c9092e6d783be14e5aba73381994c7eb64752b","completion_evidence_scope":"github_merged_or_earlier","estimator_method_version":"empirical-v3","generated_date":"2026-10-19","inventory":[{"name":"aggregate-prior.json","sha256":"18453366a6bff6a10190758d36498d450c672f2529d951ed07220db5f17e219d","size":11612},{"name":"operator-notification.json","sha256":"5ff88aa65af20ab76bfb9f2cc38ce936295a6335ae740934a1dfb8d1aad45c6c","size":622},{"name":"pricing-snapshot.json","sha256":"ee13a0e3106dd6372b0fb4a78543ddae6bb47f66fca685c3077c1e3ffb0a06cf","size":9978},{"name":"quota-snapshot.json","sha256":"8aed4444032d662fc8ddb2cbb9f1160fd70d93b5b1396012c1325949d9a55f3a","size":1726}],"linkage_manifest_sha256":"dd01c752e9db672ef3a542b23c033a5ef1c4a5730745f0471503fb1b153f6b88","notification_result":"delivered","original_calibration_date":"2026-10-19","pricing_material_unpriced_threshold_basis_points":1000,"pricing_policy_sha256":"a492f67da8c68b1b5a72e9a9670a2d11d1a6edc32b2d872905eeeb25231ffcc5","pricing_policy_version":"2026-10-19.1","pricing_registry_sha256":"af8c4f5942a90509df706477a28029f6392a94f2132616153955f74a148e76af","pricing_result_sha256":"ee13a0e3106dd6372b0fb4a78543ddae6bb47f66fca685c3077c1e3ffb0a06cf","quota_registry_sha256":"6a3d8d44b5ec9f8d8cb12fc67f1775dfec4f21507ea22360022dc3978f47f627","quota_result_sha256":"8aed4444032d662fc8ddb2cbb9f1160fd70d93b5b1396012c1325949d9a55f3a","receipt_sha256":"e96c80d2849294da3b48a85104427d16fb35db37bdf1cee0809e57c80831c737","release_manifest_sha256":"790e7b6af43c03aef9399dea81b13f95c67cc10efb27700b680b26c937c035d5","repository_sha256":"76e43252df48d7ab34f570741f2b8db8a2dee871ac50d8b8fc2155f6edb4ced2","schema_version":3,"seed":0,"source_cutoff_date":"2026-10-19","source_manifest_sha256":"cea052aa1c3aed761519ea16d00d13bdf9b21b47a236923945e14aaa7d07f91f","version":"7.0.9"}
\ No newline at end of file
diff --git a/plugins/agent-collab/project-estimation-data/operator-notification.json b/plugins/agent-collab/project-estimation-data/operator-notification.json
index 79a6d1d1..19b09393 100644
--- a/plugins/agent-collab/project-estimation-data/operator-notification.json
+++ b/plugins/agent-collab/project-estimation-data/operator-notification.json
@@ -1 +1 @@
-{"decision":"quota_unknown","generated_date":"2026-09-24","pricing_coverage_basis_points":10000,"quota_coverage_basis_points":0,"schema_version":1,"unresolved":[{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"anthropic"},{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"google"},{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"openai"},{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"xai"}]}
\ No newline at end of file
+{"decision":"quota_unknown","generated_date":"2026-10-19","pricing_coverage_basis_points":10000,"quota_coverage_basis_points":0,"schema_version":1,"unresolved":[{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"anthropic"},{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"google"},{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"openai"},{"decision":"unknown","failure_class":"no_reviewed_value","kind":"quota","original_date":null,"provider":"xai"}]}
\ No newline at end of file
diff --git a/plugins/agent-collab/project-estimation-data/pricing-snapshot.json b/plugins/agent-collab/project-estimation-data/pricing-snapshot.json
index b0f3c341..ee48c2d7 100644
--- a/plugins/agent-collab/project-estimation-data/pricing-snapshot.json
+++ b/plugins/agent-collab/project-estimation-data/pricing-snapshot.json
@@ -1 +1 @@
-{"kind":"pricing","material_unpriced":false,"operator_notification_required":false,"policy_sha256":"ea78f732a3d5a39776b079abde7f900e214ac8afdbd4a281a5b78d3e175a8514","policy_version":"2026-09-06.1","providers":{"anthropic":{"content_type":"text/markdown","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"fd59732fce2c7c1d1c01f3856f7e2d22ff8ad123643f93015d0a644517d10cc2","last_successful_official_date":"2026-09-24","material_share_basis_points":2500,"original_last_good_date":null,"provider":"anthropic","redirect_chain_sha256":"ce33fb44675b007a111837395039727ee222388f3832de74c19971ae6b8dfb2f","retrieved_date":"2026-09-24","source_url_sha256":"fd59732fce2c7c1d1c01f3856f7e2d22ff8ad123643f93015d0a644517d10cc2","status":"official","value_sha256":"584cc479af2cebdcae6c1f9480aac6332027f804f8c89194b40a95fd446eac71","values":[{"amount_microusd":10000000,"amount_text":"$10","approved_value_sha256":"98884ff861c83ec7ab6cf331437fd96ab30a2470a03d1ba03fddbca09a16a217","currency":"USD","modality":"text","model":"claude-fable-5","modifiers":[],"record_id":"claude-fable-5-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":1000000,"amount_text":"$1","approved_value_sha256":"2bd0646253a7f03f13c8b90e9017f449b447535be95953318cbf82188bb97b81","currency":"USD","modality":"text","model":"claude-fable-5","modifiers":[],"record_id":"claude-fable-5-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":50000000,"amount_text":"$50","approved_value_sha256":"4b81a10d37fdac78a8b3049730f298a942036cac34243d931ce4d033b9e9ad08","currency":"USD","modality":"text","model":"claude-fable-5","modifiers":[],"record_id":"claude-fable-5-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"},{"amount_microusd":5000000,"amount_text":"$5","approved_value_sha256":"de262143739f4455e5cacc2b417e440a3e6fd874631c0b4f71b2b9df0f496228","currency":"USD","modality":"text","model":"claude-opus-5","modifiers":[],"record_id":"claude-opus-5-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":500000,"amount_text":"$0.50","approved_value_sha256":"ef32119e4a0e5e1eb033068f387e2221b190b352ba9655508644f4a10651b14d","currency":"USD","modality":"text","model":"claude-opus-5","modifiers":[],"record_id":"claude-opus-5-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":25000000,"amount_text":"$25","approved_value_sha256":"e445b0c2a4ec027532fef1f4b0026e1c721740edcafd0c856b891cfc7228f758","currency":"USD","modality":"text","model":"claude-opus-5","modifiers":[],"record_id":"claude-opus-5-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"},{"amount_microusd":2000000,"amount_text":"$2","approved_value_sha256":"8cda5405b99ccb565b450d20f642001212e22b332b2f291721c3570a0e495ac6","currency":"USD","modality":"text","model":"claude-sonnet-5","modifiers":[],"record_id":"claude-sonnet-5-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":200000,"amount_text":"$0.20","approved_value_sha256":"c154a7ef74e88516d61679c31f077655b09c89232e7d57838f08332702484323","currency":"USD","modality":"text","model":"claude-sonnet-5","modifiers":[],"record_id":"claude-sonnet-5-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":10000000,"amount_text":"$10","approved_value_sha256":"c0e0150fde7c306b72a69dcf6b65d8a01c7768dcb69c8bb8e671d5b33bf34bd3","currency":"USD","modality":"text","model":"claude-sonnet-5","modifiers":[],"record_id":"claude-sonnet-5-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"}]},"google":{"content_type":"text/html","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"f583c43544cc67eb0c55e73d9e7b3f93c8e0c74e2fe77a37430dfbf6e24877a2","last_successful_official_date":"2026-09-24","material_share_basis_points":2500,"original_last_good_date":null,"provider":"google","redirect_chain_sha256":"572b3ee824f6413b03e39006a5c1f237892bed8f20dc7f2a57e0f44c1ec4cca6","retrieved_date":"2026-09-24","source_url_sha256":"f583c43544cc67eb0c55e73d9e7b3f93c8e0c74e2fe77a37430dfbf6e24877a2","status":"official","value_sha256":"655760343cb963e452d5bc221548a6fc59c926668e43ef6e360660cf5cb2cd55","values":[{"amount_microusd":750000,"amount_text":"$0.75","approved_value_sha256":"99c920a4b654817139bbaa104afc70431cb20608419f1ba3aacbb91b62714268","currency":"USD","modality":"text","model":"gemini-3.7-flash","modifiers":[],"record_id":"gemini-3.7-flash-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":75000,"amount_text":"$0.075","approved_value_sha256":"3f994c7450223eea2d97109266a03b2dc5c0f975da698a8a2011d8047cb2703b","currency":"USD","modality":"text","model":"gemini-3.7-flash","modifiers":[],"record_id":"gemini-3.7-flash-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":3750000,"amount_text":"$3.75","approved_value_sha256":"ce0d7e57c2dc29feb2e7480c6e85be38e2a2259ff6f6d71ce98f7d4bbccdd191","currency":"USD","modality":"text","model":"gemini-3.7-flash","modifiers":[],"record_id":"gemini-3.7-flash-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"},{"amount_microusd":750000,"amount_text":"$0.75","approved_value_sha256":"92d66c0294ca18a632c88a002868c4c48bde9764ca30349f175bd317c635a250","currency":"USD","modality":"text","model":"gemini-3.6-flash","modifiers":[],"record_id":"gemini-3.6-flash-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":75000,"amount_text":"$0.075","approved_value_sha256":"2a95749c43f4396232e24c6b7ad52883bff40b34690c83cd031ca60b700271fb","currency":"USD","modality":"text","model":"gemini-3.6-flash","modifiers":[],"record_id":"gemini-3.6-flash-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":3750000,"amount_text":"$3.75","approved_value_sha256":"52363cc9ea1c4b56700aa0e816f6be6f3aed9f8e80ee128499271c4377d4618e","currency":"USD","modality":"text","model":"gemini-3.6-flash","modifiers":[],"record_id":"gemini-3.6-flash-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"}]},"openai":{"content_type":"text/markdown","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"d62ecf3508c2e7ac43de23710ea8b6563386619e13d1599c5934385a60569bbf","last_successful_official_date":"2026-09-24","material_share_basis_points":2500,"original_last_good_date":null,"provider":"openai","redirect_chain_sha256":"85e42ea7a52aef002865ef69e5fd2c5c2191fbd58c283cd66fc5c4a05da3c9ed","retrieved_date":"2026-09-24","source_url_sha256":"d62ecf3508c2e7ac43de23710ea8b6563386619e13d1599c5934385a60569bbf","status":"official","value_sha256":"3fbeb55777ebcb495cd54ccbc5c07860319fe55c87976fefbef3e09d2e26be67","values":[{"amount_microusd":4000000,"amount_text":"$4","approved_value_sha256":"fea9d389b74a978a0dd0410853bb1136d16e1fc22e36e9854071e61808fd71d0","currency":"USD","modality":"text","model":"gpt-5.6-sol","modifiers":["promotional_through_at_least_2026-11-21","input_over_272k_2x"],"record_id":"gpt-5-6-sol-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":400000,"amount_text":"$0.4","approved_value_sha256":"3b4e12ef906dd5f74c4631d39a97bb8cd4b5a490a20538e89694eba04ac33b4d","currency":"USD","modality":"text","model":"gpt-5.6-sol","modifiers":["promotional_through_at_least_2026-11-21","input_over_272k_2x","cache_write_not_modeled"],"record_id":"gpt-5-6-sol-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":20000000,"amount_text":"$20","approved_value_sha256":"ede62d1719593cf5123a948a8a9c37157dc9d43d92494349b0ae67552dafed3a","currency":"USD","modality":"text","model":"gpt-5.6-sol","modifiers":["promotional_through_at_least_2026-11-21","input_over_272k_output_1_5x"],"record_id":"gpt-5-6-sol-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"}]},"xai":{"content_type":"text/markdown","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"8c76ac38a822d1cc80ff3907c53271503ced7a6ef894fa44777d39a3c6c268ff","last_successful_official_date":"2026-09-24","material_share_basis_points":2500,"original_last_good_date":null,"provider":"xai","redirect_chain_sha256":"025de286854f9320b90dee606adbcdee361fe142de0476b055d6382aa85eee80","retrieved_date":"2026-09-24","source_url_sha256":"8c76ac38a822d1cc80ff3907c53271503ced7a6ef894fa44777d39a3c6c268ff","status":"official","value_sha256":"2f0c6493c4bbe3c6130d5a2e976d5cdae1298b31b9334076f0ee66c2e9db1c3a","values":[{"amount_microusd":1000000,"amount_text":"$1.00","approved_value_sha256":"21e7d546c30672482e4f6dfbb4e875496bea86ef22ffb25565d1cd2ab126d4b1","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-lt_200k-input","tier":"lt_200k","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":200000,"amount_text":"$0.20","approved_value_sha256":"a53a47379746fdb8b27887ea3836146380e52a67fbc0c4a254d77aba185854ce","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-lt_200k-cached-input","tier":"lt_200k","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":2000000,"amount_text":"$2.00","approved_value_sha256":"48463b5a0527ddefb962684ccf208eda2db53c00ec0d31d4226c873d35d8bd5d","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-lt_200k-output","tier":"lt_200k","token_class":"output","unit":"per_million_tokens"},{"amount_microusd":2000000,"amount_text":"$2.00","approved_value_sha256":"2a4c417aec31ed3ab92e22cc306da0fcfb57b76897d3a796cce845cbca95b404","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-gte_200k-input","tier":"gte_200k","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":400000,"amount_text":"$0.40","approved_value_sha256":"a2a75202366013e1487170b77dd97731c3fbd6193f0a653fe2c6235abf0ffc6e","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-gte_200k-cached-input","tier":"gte_200k","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":4000000,"amount_text":"$4.00","approved_value_sha256":"1d8fc9ed0fa451b81e5c79a7ab830613ec97edefa28f2af57e0045585ddc5bcc","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-gte_200k-output","tier":"gte_200k","token_class":"output","unit":"per_million_tokens"}]}},"retrieved_date":"2026-09-24","schema_version":1,"uncertainty_basis_points":0}
\ No newline at end of file
+{"kind":"pricing","material_unpriced":false,"operator_notification_required":false,"policy_sha256":"a492f67da8c68b1b5a72e9a9670a2d11d1a6edc32b2d872905eeeb25231ffcc5","policy_version":"2026-10-19.1","providers":{"anthropic":{"content_type":"text/markdown","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"fd59732fce2c7c1d1c01f3856f7e2d22ff8ad123643f93015d0a644517d10cc2","last_successful_official_date":"2026-10-19","material_share_basis_points":2500,"original_last_good_date":null,"provider":"anthropic","redirect_chain_sha256":"ce33fb44675b007a111837395039727ee222388f3832de74c19971ae6b8dfb2f","retrieved_date":"2026-10-19","source_url_sha256":"fd59732fce2c7c1d1c01f3856f7e2d22ff8ad123643f93015d0a644517d10cc2","status":"official","value_sha256":"584cc479af2cebdcae6c1f9480aac6332027f804f8c89194b40a95fd446eac71","values":[{"amount_microusd":10000000,"amount_text":"$10","approved_value_sha256":"98884ff861c83ec7ab6cf331437fd96ab30a2470a03d1ba03fddbca09a16a217","currency":"USD","modality":"text","model":"claude-fable-5","modifiers":[],"record_id":"claude-fable-5-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":1000000,"amount_text":"$1","approved_value_sha256":"2bd0646253a7f03f13c8b90e9017f449b447535be95953318cbf82188bb97b81","currency":"USD","modality":"text","model":"claude-fable-5","modifiers":[],"record_id":"claude-fable-5-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":50000000,"amount_text":"$50","approved_value_sha256":"4b81a10d37fdac78a8b3049730f298a942036cac34243d931ce4d033b9e9ad08","currency":"USD","modality":"text","model":"claude-fable-5","modifiers":[],"record_id":"claude-fable-5-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"},{"amount_microusd":5000000,"amount_text":"$5","approved_value_sha256":"de262143739f4455e5cacc2b417e440a3e6fd874631c0b4f71b2b9df0f496228","currency":"USD","modality":"text","model":"claude-opus-5","modifiers":[],"record_id":"claude-opus-5-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":500000,"amount_text":"$0.50","approved_value_sha256":"ef32119e4a0e5e1eb033068f387e2221b190b352ba9655508644f4a10651b14d","currency":"USD","modality":"text","model":"claude-opus-5","modifiers":[],"record_id":"claude-opus-5-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":25000000,"amount_text":"$25","approved_value_sha256":"e445b0c2a4ec027532fef1f4b0026e1c721740edcafd0c856b891cfc7228f758","currency":"USD","modality":"text","model":"claude-opus-5","modifiers":[],"record_id":"claude-opus-5-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"},{"amount_microusd":2000000,"amount_text":"$2","approved_value_sha256":"8cda5405b99ccb565b450d20f642001212e22b332b2f291721c3570a0e495ac6","currency":"USD","modality":"text","model":"claude-sonnet-5","modifiers":[],"record_id":"claude-sonnet-5-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":200000,"amount_text":"$0.20","approved_value_sha256":"c154a7ef74e88516d61679c31f077655b09c89232e7d57838f08332702484323","currency":"USD","modality":"text","model":"claude-sonnet-5","modifiers":[],"record_id":"claude-sonnet-5-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":10000000,"amount_text":"$10","approved_value_sha256":"c0e0150fde7c306b72a69dcf6b65d8a01c7768dcb69c8bb8e671d5b33bf34bd3","currency":"USD","modality":"text","model":"claude-sonnet-5","modifiers":[],"record_id":"claude-sonnet-5-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"}]},"google":{"content_type":"text/html","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"f583c43544cc67eb0c55e73d9e7b3f93c8e0c74e2fe77a37430dfbf6e24877a2","last_successful_official_date":"2026-10-19","material_share_basis_points":2500,"original_last_good_date":null,"provider":"google","redirect_chain_sha256":"572b3ee824f6413b03e39006a5c1f237892bed8f20dc7f2a57e0f44c1ec4cca6","retrieved_date":"2026-10-19","source_url_sha256":"f583c43544cc67eb0c55e73d9e7b3f93c8e0c74e2fe77a37430dfbf6e24877a2","status":"official","value_sha256":"9064be3123b88278a02456acd079b11a48dc6abecd1dbf8f68c5114bf8bf59a0","values":[{"amount_microusd":750000,"amount_text":"$0.75","approved_value_sha256":"92d66c0294ca18a632c88a002868c4c48bde9764ca30349f175bd317c635a250","currency":"USD","modality":"text","model":"gemini-3.6-flash","modifiers":[],"record_id":"gemini-3.6-flash-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":75000,"amount_text":"$0.075","approved_value_sha256":"2a95749c43f4396232e24c6b7ad52883bff40b34690c83cd031ca60b700271fb","currency":"USD","modality":"text","model":"gemini-3.6-flash","modifiers":[],"record_id":"gemini-3.6-flash-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":3750000,"amount_text":"$3.75","approved_value_sha256":"52363cc9ea1c4b56700aa0e816f6be6f3aed9f8e80ee128499271c4377d4618e","currency":"USD","modality":"text","model":"gemini-3.6-flash","modifiers":[],"record_id":"gemini-3.6-flash-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"}]},"openai":{"content_type":"text/markdown","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"d62ecf3508c2e7ac43de23710ea8b6563386619e13d1599c5934385a60569bbf","last_successful_official_date":"2026-10-19","material_share_basis_points":2500,"original_last_good_date":null,"provider":"openai","redirect_chain_sha256":"85e42ea7a52aef002865ef69e5fd2c5c2191fbd58c283cd66fc5c4a05da3c9ed","retrieved_date":"2026-10-19","source_url_sha256":"d62ecf3508c2e7ac43de23710ea8b6563386619e13d1599c5934385a60569bbf","status":"official","value_sha256":"3fbeb55777ebcb495cd54ccbc5c07860319fe55c87976fefbef3e09d2e26be67","values":[{"amount_microusd":4000000,"amount_text":"$4","approved_value_sha256":"fea9d389b74a978a0dd0410853bb1136d16e1fc22e36e9854071e61808fd71d0","currency":"USD","modality":"text","model":"gpt-5.6-sol","modifiers":["promotional_through_at_least_2026-11-21","input_over_272k_2x"],"record_id":"gpt-5-6-sol-standard-input","tier":"standard","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":400000,"amount_text":"$0.4","approved_value_sha256":"3b4e12ef906dd5f74c4631d39a97bb8cd4b5a490a20538e89694eba04ac33b4d","currency":"USD","modality":"text","model":"gpt-5.6-sol","modifiers":["promotional_through_at_least_2026-11-21","input_over_272k_2x","cache_write_not_modeled"],"record_id":"gpt-5-6-sol-standard-cached-input","tier":"standard","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":20000000,"amount_text":"$20","approved_value_sha256":"ede62d1719593cf5123a948a8a9c37157dc9d43d92494349b0ae67552dafed3a","currency":"USD","modality":"text","model":"gpt-5.6-sol","modifiers":["promotional_through_at_least_2026-11-21","input_over_272k_output_1_5x"],"record_id":"gpt-5-6-sol-standard-output","tier":"standard","token_class":"output","unit":"per_million_tokens"}]},"xai":{"content_type":"text/markdown","elapsed_class":"bounded","failure_class":null,"final_url_sha256":"8c76ac38a822d1cc80ff3907c53271503ced7a6ef894fa44777d39a3c6c268ff","last_successful_official_date":"2026-10-19","material_share_basis_points":2500,"original_last_good_date":null,"provider":"xai","redirect_chain_sha256":"025de286854f9320b90dee606adbcdee361fe142de0476b055d6382aa85eee80","retrieved_date":"2026-10-19","source_url_sha256":"8c76ac38a822d1cc80ff3907c53271503ced7a6ef894fa44777d39a3c6c268ff","status":"official","value_sha256":"2f0c6493c4bbe3c6130d5a2e976d5cdae1298b31b9334076f0ee66c2e9db1c3a","values":[{"amount_microusd":1000000,"amount_text":"$1.00","approved_value_sha256":"21e7d546c30672482e4f6dfbb4e875496bea86ef22ffb25565d1cd2ab126d4b1","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-lt_200k-input","tier":"lt_200k","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":200000,"amount_text":"$0.20","approved_value_sha256":"a53a47379746fdb8b27887ea3836146380e52a67fbc0c4a254d77aba185854ce","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-lt_200k-cached-input","tier":"lt_200k","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":2000000,"amount_text":"$2.00","approved_value_sha256":"48463b5a0527ddefb962684ccf208eda2db53c00ec0d31d4226c873d35d8bd5d","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-lt_200k-output","tier":"lt_200k","token_class":"output","unit":"per_million_tokens"},{"amount_microusd":2000000,"amount_text":"$2.00","approved_value_sha256":"2a4c417aec31ed3ab92e22cc306da0fcfb57b76897d3a796cce845cbca95b404","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-gte_200k-input","tier":"gte_200k","token_class":"input","unit":"per_million_tokens"},{"amount_microusd":400000,"amount_text":"$0.40","approved_value_sha256":"a2a75202366013e1487170b77dd97731c3fbd6193f0a653fe2c6235abf0ffc6e","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-gte_200k-cached-input","tier":"gte_200k","token_class":"cached_input","unit":"per_million_tokens"},{"amount_microusd":4000000,"amount_text":"$4.00","approved_value_sha256":"1d8fc9ed0fa451b81e5c79a7ab830613ec97edefa28f2af57e0045585ddc5bcc","currency":"USD","modality":"text","model":"grok-build-0.1","modifiers":[],"record_id":"grok-build-0-1-gte_200k-output","tier":"gte_200k","token_class":"output","unit":"per_million_tokens"}]}},"retrieved_date":"2026-10-19","schema_version":1,"uncertainty_basis_points":0}
\ No newline at end of file
diff --git a/plugins/agent-collab/project-estimation-data/quota-snapshot.json b/plugins/agent-collab/project-estimation-data/quota-snapshot.json
index 7c7d5a30..15086467 100644
--- a/plugins/agent-collab/project-estimation-data/quota-snapshot.json
+++ b/plugins/agent-collab/project-estimation-data/quota-snapshot.json
@@ -1 +1 @@
-{"kind":"quota","material_unpriced":false,"operator_notification_required":true,"policy_sha256":"ea78f732a3d5a39776b079abde7f900e214ac8afdbd4a281a5b78d3e175a8514","policy_version":"2026-09-06.1","providers":{"anthropic":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"anthropic","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]},"google":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"google","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]},"openai":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"openai","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]},"xai":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"xai","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]}},"retrieved_date":"2026-09-24","schema_version":1,"uncertainty_basis_points":3000}
\ No newline at end of file
+{"kind":"quota","material_unpriced":false,"operator_notification_required":true,"policy_sha256":"a492f67da8c68b1b5a72e9a9670a2d11d1a6edc32b2d872905eeeb25231ffcc5","policy_version":"2026-10-19.1","providers":{"anthropic":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"anthropic","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]},"google":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"google","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]},"openai":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"openai","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]},"xai":{"content_type":null,"elapsed_class":null,"failure_class":"no_reviewed_value","final_url_sha256":null,"last_successful_official_date":null,"material_share_basis_points":0,"original_last_good_date":null,"provider":"xai","redirect_chain_sha256":null,"retrieved_date":null,"source_url_sha256":null,"status":"unknown","value_sha256":null,"values":[]}},"retrieved_date":"2026-10-19","schema_version":1,"uncertainty_basis_points":3000}
\ No newline at end of file
diff --git a/plugins/agent-collab/runtime-manifest.json b/plugins/agent-collab/runtime-manifest.json
index 5601177a..cecdd437 100644
--- a/plugins/agent-collab/runtime-manifest.json
+++ b/plugins/agent-collab/runtime-manifest.json
@@ -1 +1 @@
-{"artifacts":[{"arch":"arm64","entrypoint":"agent-collab-runtime","files":[{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_blake2.so","role":"runtime_library","sha256":"5c587194aa38a6f1b4a6ec768b5624381114b26b688d0c0b31a95f89302d5cdc","signing_profile":"production_developer_id","size":89456},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_bz2.so","role":"runtime_library","sha256":"ecbaeaeb3be3d552a5e6f37767fecf90b488c8603793240d815d715df05b13d1","signing_profile":"production_developer_id","size":72784},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_cn.so","role":"runtime_library","sha256":"70398d0ff59395b46a451ccdd24f2857b2d0473ab53430d94ee30590f1f5349e","signing_profile":"production_developer_id","size":185264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_hk.so","role":"runtime_library","sha256":"6f64117893d58aafd0dd21896b28526f0580323f3210ce8f3227fd7b3dddf583","signing_profile":"production_developer_id","size":185328},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_iso2022.so","role":"runtime_library","sha256":"1286ab0573418b1a30e009b020ec1635f448f3fca6c81f5a916cd0cb39abe500","signing_profile":"production_developer_id","size":71936},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_jp.so","role":"runtime_library","sha256":"a0ad984c4f6cc8b0a919328718685171a661e5d10c182e96f7e317a280715910","signing_profile":"production_developer_id","size":301120},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_kr.so","role":"runtime_library","sha256":"556cb599e68a5f9f047f529f9d638cd9730ed42f65c6c94531be3c36e6a6bc46","signing_profile":"production_developer_id","size":168928},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_tw.so","role":"runtime_library","sha256":"138dc85a7b5fb7eff84e173ded170ade54156afeeb54c9f940ccd9589265907a","signing_profile":"production_developer_id","size":168432},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_contextvars.so","role":"runtime_library","sha256":"2614905e005eb35d7060b2444d8b512f2367748078fb10e725022fe8a0b742e5","signing_profile":"production_developer_id","size":68576},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_ctypes.so","role":"runtime_library","sha256":"7a52265ef4811b7c5e6d66cad89ae0c352ef5342bc5a6c14681bdc4cfdcbcac9","signing_profile":"production_developer_id","size":175840},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_datetime.so","role":"runtime_library","sha256":"9284744543a104fecf8508def8de05e235326f93cb1ad43d143fbaddb1c0aaed","signing_profile":"production_developer_id","size":150144},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_decimal.so","role":"runtime_library","sha256":"cb7fd29a08b08eb6ed9df53513b4c7c4152f8df0cbdcadb05b17304fc0c2a1ba","signing_profile":"production_developer_id","size":364640},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_heapq.so","role":"runtime_library","sha256":"722d59790583ccd0ca8fb3efccb95b3d3367c78c3386d9516f77337537ea8423","signing_profile":"production_developer_id","size":69728},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_lzma.so","role":"runtime_library","sha256":"335db413f604157b7e633b0d3075e76f55a0d6ac7f3505897e8c8d9078516151","signing_profile":"production_developer_id","size":92240},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_md5.so","role":"runtime_library","sha256":"f00489d817af83fe7158a01d8d336eecd6f2bd75efb4baf60ac9cb39e730dd47","signing_profile":"production_developer_id","size":71728},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multibytecodec.so","role":"runtime_library","sha256":"854bfdf766a505ffbfbca7db232a3b3c0f66d71fa312a75c205c1b2926509e05","signing_profile":"production_developer_id","size":95808},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multiprocessing.so","role":"runtime_library","sha256":"21585cd54a172241e4febda8a89fad29eea0707f7e18ea19bafb03da8bcb6f74","signing_profile":"production_developer_id","size":73472},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_opcode.so","role":"runtime_library","sha256":"b50d77d7b654d23b8addf85a5d4fcf050e6e2a442b278cc9325e3e2076f7de92","signing_profile":"production_developer_id","size":72448},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_pickle.so","role":"runtime_library","sha256":"2b89b5353824d27a9b4215abe4c7b8d89143e7d47c42e908a37e0ed193b4f240","signing_profile":"production_developer_id","size":168032},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixshmem.so","role":"runtime_library","sha256":"485591a3910d8cf40e1c1067b28c70c4532f80375211975792666af640b1930c","signing_profile":"production_developer_id","size":69408},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixsubprocess.so","role":"runtime_library","sha256":"39ccbedc480af39511bee60d59fea7e2eaccebbe96598299a267ae07895ab6f0","signing_profile":"production_developer_id","size":72496},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_queue.so","role":"runtime_library","sha256":"9e570dd63356d38820985721738541732e0aa8945ba8f51617fb6f588a6e684c","signing_profile":"production_developer_id","size":71840},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_random.so","role":"runtime_library","sha256":"b80b2403bf20f996a97bee73976213f8f8097aeb8bf3a8bc8b79ce18fce77dce","signing_profile":"production_developer_id","size":71680},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_scproxy.so","role":"runtime_library","sha256":"747e6f1865b6229453c16de77613c51a8ebdb02f4de4f41b79643511f79e9061","signing_profile":"production_developer_id","size":71232},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha1.so","role":"runtime_library","sha256":"699fb152709f38ea349b28d77a5c24ed58f609fb096ecd13c731896473de2f47","signing_profile":"production_developer_id","size":71760},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha2.so","role":"runtime_library","sha256":"70a68de33eaa244f9930b3baf358bd5f66273a6590e34f31fe22e3ae7d55e252","signing_profile":"production_developer_id","size":107264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha3.so","role":"runtime_library","sha256":"9f3fbfef086f1c39f68ba763f9dc19c47505eb15355ef1a7a137864789f40838","signing_profile":"production_developer_id","size":91008},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_socket.so","role":"runtime_library","sha256":"0f71ad0f2abef2418afd83679930dd77192d0a2f377fd46ab4c1a1e15b41a4b7","signing_profile":"production_developer_id","size":132288},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sqlite3.so","role":"runtime_library","sha256":"508ec281137af4b7d96f2d3c9d8b89b3afcdf2e5e8b1a9f284170edcb71ced26","signing_profile":"production_developer_id","size":161264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_statistics.so","role":"runtime_library","sha256":"3ed3e27afa61ba4839cfcefb5485633375d9f7049d6c9590230325dcec93c7e5","signing_profile":"production_developer_id","size":68704},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_struct.so","role":"runtime_library","sha256":"8ef71cfdbaff6ae6723d43466277a92f1108c82bc5380eb5718b27dd4f7d0364","signing_profile":"production_developer_id","size":94528},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_uuid.so","role":"runtime_library","sha256":"2e4f22fd92b491acdf628fed7091730c339bf1fb67eb2c9515ac3195a6a1a14a","signing_profile":"production_developer_id","size":68528},{"architecture":"arm64","install_mode":320,"macho_type":"executable","minimum_macos":"14.0","path":"agent-collab-runtime","role":"entrypoint","sha256":"efa02a08e266c545d851f6580ca9a287cb27aec8070fe100036c0db4326cac2c","signing_profile":"production_developer_id","size":9125920},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"array.so","role":"runtime_library","sha256":"8362039403ca8be324652f05eadd3cb3d5742a67b1cfa996c3c16ea85b142569","signing_profile":"production_developer_id","size":113760},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"binascii.so","role":"runtime_library","sha256":"1dc956422a17e9b58253f9adfa8157ba6cf42937223cdb83617ffe3f06b4e4ee","signing_profile":"production_developer_id","size":72224},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"fcntl.so","role":"runtime_library","sha256":"cbcd1a7163ca1d78c547dccd97d3aba5fb80814044e2eb1d14fd682a9b3c09a5","signing_profile":"production_developer_id","size":70368},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"grp.so","role":"runtime_library","sha256":"fc9893506e33fec346c3d7baced096407e2cc33c1db2226ed461967f099bc666","signing_profile":"production_developer_id","size":71024},{"architecture":"arm64","install_mode":320,"macho_type":"dylib","minimum_macos":"14.0","path":"libpython3.13.dylib","role":"runtime_library","sha256":"56ac3152f7097ac4d6822e83d6b7a4c345d0223a9ae5175b8c4d05adcc346d1c","signing_profile":"production_developer_id","size":4973360},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"math.so","role":"runtime_library","sha256":"237e2b722a1d19d2ddf8c80c08f48897b1ecaf1266f7083eee07146e44656e88","signing_profile":"production_developer_id","size":111216},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"mmap.so","role":"runtime_library","sha256":"f9e11d888132254102528eaa3aba596fdb1b41edc5dd3954df41f636a00521da","signing_profile":"production_developer_id","size":73776},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"pyexpat.so","role":"runtime_library","sha256":"215f7538077df8fb65726dc30b7d6d8c6c4bc6fd82ee6a56a9ff2bedbf93a026","signing_profile":"production_developer_id","size":259232},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"select.so","role":"runtime_library","sha256":"f6a7dec68313862941f603d17b88d68411a7d1e9347acb45ed6de0e7b922d16a","signing_profile":"production_developer_id","size":92160},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"termios.so","role":"runtime_library","sha256":"a45504f54d064fd22d66dea1b7037c2c6e479cb9c81ea1850e2193ae9c3e134e","signing_profile":"production_developer_id","size":71744},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"unicodedata.so","role":"runtime_library","sha256":"c6a2e002f8b34330cef1276f78ea6a47de65e7d361205c565c760d4d48c6a8c2","signing_profile":"production_developer_id","size":746848},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"zlib.so","role":"runtime_library","sha256":"04c9182a093d4b3dbf47235293243f8dc5c34c399755188802a522cb9a4924c4","signing_profile":"production_developer_id","size":92896}],"kind":"standalone_bundle","minimum_macos":"14.0","path":"runtime/darwin-arm64/agent-collab-runtime.bundle","platform":"darwin","provider_runtime_version":"5.0.9","sha256":"ee1ec3f4c5c1e7c9655122fd8af554fad8e086dd81481f4ab45a32945b55f626","signing":{"hardened_runtime":true,"identity":"Developer ID Application: OSUMI CONSULTING LLC (36UFP9KY4T)","mode":"developer_id","require_notarization":true,"secure_timestamp":true,"team_id":"36UFP9KY4T"},"size":19672432,"wire_contract_sha256":"a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a"},{"arch":"x86_64","entrypoint":"agent-collab-runtime","files":[{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_blake2.so","role":"runtime_library","sha256":"d6d520b37959435d4822e5963204ef64867b39e7c9b80cce996d82b9530476e2","signing_profile":"production_developer_id","size":60944},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_bz2.so","role":"runtime_library","sha256":"4f4e72e2e53971f374ee6d10e064f4fb74c22e24d96c7270c93916ed2ddac50a","signing_profile":"production_developer_id","size":44256},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_cn.so","role":"runtime_library","sha256":"06a5cced6b0be30be6ea95ff0627a8bc36724ed8006d690f64844a77555c9071","signing_profile":"production_developer_id","size":165584},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_hk.so","role":"runtime_library","sha256":"b5d470fe0f5db06299b577c793fe0191c0239a03bdf0c76adaeb358709888331","signing_profile":"production_developer_id","size":173904},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_iso2022.so","role":"runtime_library","sha256":"673e7e8b1d744b9288a028dc189ed07037e86811fd9f0064e98d593bd6be37a8","signing_profile":"production_developer_id","size":43392},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_jp.so","role":"runtime_library","sha256":"1bee1add57f6eef3e4729153c4235f563e4a133e99bdc393212d4053b865b5ee","signing_profile":"production_developer_id","size":273856},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_kr.so","role":"runtime_library","sha256":"107e27034aa8f74790ec85ed8fbc8ed51d1e603aed9f8cfbdd0d3f9f5b21de88","signing_profile":"production_developer_id","size":153280},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_tw.so","role":"runtime_library","sha256":"2c16defc65b74b8f3a8d8380f9d60614061225c55ae15fa31943c2e0560f3302","signing_profile":"production_developer_id","size":132144},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_contextvars.so","role":"runtime_library","sha256":"5959447360a404539f504c3bbd1ce2e6c954d47610bb82f67f45bf4b329b8f58","signing_profile":"production_developer_id","size":31712},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_ctypes.so","role":"runtime_library","sha256":"13239743ae5893c3660b6f134bda84373be0b7730a430c8f9184c24a4070df59","signing_profile":"production_developer_id","size":148640},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_datetime.so","role":"runtime_library","sha256":"ddfeb567214b5896ed364c37e415563b0c51ded8a0f20aee0152b9a10738089a","signing_profile":"production_developer_id","size":122768},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_decimal.so","role":"runtime_library","sha256":"d1b1b5eac24fc15af9cd3c952f0ee0c8c194e34feaed6e700fcb898eb7fc4a40","signing_profile":"production_developer_id","size":347632},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_heapq.so","role":"runtime_library","sha256":"d1e93bc8ee8aa9bb758551127299046302ad2896dbabc48ebd20c237a0e7fad4","signing_profile":"production_developer_id","size":41120},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_lzma.so","role":"runtime_library","sha256":"f77258a3bb064ba9aec5bde69cb8b4bab778cb45bda4b1749a2a5baa0fbf79ff","signing_profile":"production_developer_id","size":55552},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_md5.so","role":"runtime_library","sha256":"9c9f2cf216d415beea5957d94f22061c8d2eb69ecae8fb7d0cda47315b656f62","signing_profile":"production_developer_id","size":43136},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multibytecodec.so","role":"runtime_library","sha256":"0b0bc7b2c04f70703193a7ea2a72998254dbff0ca00603067dbdfd71664673e5","signing_profile":"production_developer_id","size":63456},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multiprocessing.so","role":"runtime_library","sha256":"9443bcb2640ea36ece4f94c51d761d773feaa8e7b492b805c789e6b2583820b8","signing_profile":"production_developer_id","size":40768},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_opcode.so","role":"runtime_library","sha256":"095d788b3c22a5f6a16c5d04ebfda8357f03466199e53ac08c9d3ae96700f9a9","signing_profile":"production_developer_id","size":43872},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_pickle.so","role":"runtime_library","sha256":"a6dc5a963648dc2fb92c57ab10f3d64d8b25f830b7ed85b4ed787288409cfd19","signing_profile":"production_developer_id","size":136096},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixshmem.so","role":"runtime_library","sha256":"33e9d0a12c90ee69b82ddb34d1a8987126a69694188aa1a6534561140bc35c8c","signing_profile":"production_developer_id","size":32544},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixsubprocess.so","role":"runtime_library","sha256":"c7e7e1017ce29c106bac65b1a4c6706c8cd6c33fc42184ddfdfc3ce30e8470e6","signing_profile":"production_developer_id","size":43952},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_queue.so","role":"runtime_library","sha256":"9a947d77f4d6bdf2c530fa31a63c5d2183d38442a33c141479c0850d09775095","signing_profile":"production_developer_id","size":39136},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_random.so","role":"runtime_library","sha256":"2599c187cc7a7d15c315f555c0b355427f1ba9823cd6d1b12fa09c082dbbb8ee","signing_profile":"production_developer_id","size":38944},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_scproxy.so","role":"runtime_library","sha256":"d51edc9da11498374612c5f0d5ae7a3c42f037d447b679369555d16c38a67b21","signing_profile":"production_developer_id","size":34368},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha1.so","role":"runtime_library","sha256":"8a8f698009577d9f80b0f9602056778fa18657182e10c8d64e19f2a538fa0c92","signing_profile":"production_developer_id","size":39024},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha2.so","role":"runtime_library","sha256":"b068dbb63377f6cc845b7a4b9700e36649bcc726b1fc036592de4278afc791f5","signing_profile":"production_developer_id","size":78992},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha3.so","role":"runtime_library","sha256":"54477cb5d8ead409b2b48522dfe4a372727643f0c5db71b83e2d829f786bc9dd","signing_profile":"production_developer_id","size":53632},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_socket.so","role":"runtime_library","sha256":"f583afe3a9d0c96c30530e350feb42000afe05b656170ed9b6c1833d1d4f4fcf","signing_profile":"production_developer_id","size":104096},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sqlite3.so","role":"runtime_library","sha256":"91ce8ca644ce8773416225c30282138e48bb23dadbe9e540557f9228807837b5","signing_profile":"production_developer_id","size":137312},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_statistics.so","role":"runtime_library","sha256":"344314f24d75de5642f5f77d65d672a34f5c154791159678c638de87cf37a416","signing_profile":"production_developer_id","size":31840},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_struct.so","role":"runtime_library","sha256":"616d8b3b8b8677866456a7ed5c7058b53e48841a67fd69ceeb8c0c5010f60caa","signing_profile":"production_developer_id","size":62144},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_uuid.so","role":"runtime_library","sha256":"90709d73fc452096f3ca842c99e473510e5f843591c6a56bb5b6df5686593719","signing_profile":"production_developer_id","size":31664},{"architecture":"x86_64","install_mode":320,"macho_type":"executable","minimum_macos":"14.0","path":"agent-collab-runtime","role":"entrypoint","sha256":"c75545ac3e3a67ff96f20e49e32cf5bc2a1313910ed8a99542c0c35520f60bc4","signing_profile":"production_developer_id","size":9373296},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"array.so","role":"runtime_library","sha256":"72aacc2a00bc9e353901203c727451ed7277774309a56c1f5aeae17dc2aa18fa","signing_profile":"production_developer_id","size":77216},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"binascii.so","role":"runtime_library","sha256":"aea60e2e7a2ff321f14b5709f45d09a84dc8ae4446bbdc5d8623c01b4ba54b08","signing_profile":"production_developer_id","size":51920},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"fcntl.so","role":"runtime_library","sha256":"59e94fda1119b63df252494b69e80ec34ceb1134e57fa29beef4b8644ff035a5","signing_profile":"production_developer_id","size":41760},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"grp.so","role":"runtime_library","sha256":"b1ec5d2817a9c91347dfeccea007c5a05c94517350ec1807c28dd9459178fe1c","signing_profile":"production_developer_id","size":38288},{"architecture":"x86_64","install_mode":320,"macho_type":"dylib","minimum_macos":"14.0","path":"libpython3.13.dylib","role":"runtime_library","sha256":"2af5c1130a6ccf7fe190107d5cf7e9ab30bbc10dedea70b95d8ba1b67bb696c5","signing_profile":"production_developer_id","size":4959200},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"math.so","role":"runtime_library","sha256":"71db2d7e99d97424fb67bf1be4bb69f50cacecdc649fddf98d77ba4e024cb229","signing_profile":"production_developer_id","size":87104},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"mmap.so","role":"runtime_library","sha256":"5ecc32c2bc8766ae6dfbc808d0b9722f2418d645712a7e9a8bfb52c8fc581d8f","signing_profile":"production_developer_id","size":49312},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"pyexpat.so","role":"runtime_library","sha256":"65aae17156eacb076698397cb3a63b8b0ec055c892e6cb8ae631d80780df5527","signing_profile":"production_developer_id","size":260688},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"select.so","role":"runtime_library","sha256":"1db26e3aae0e23fda900f51f07fe39c02ba633c9a7536392c45d5e1ced0c5403","signing_profile":"production_developer_id","size":55504},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"termios.so","role":"runtime_library","sha256":"5ad53da2f9dd48695363332c28075cb102b9e8c8d20b6b06cc203e6a9cf72b61","signing_profile":"production_developer_id","size":43136},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"unicodedata.so","role":"runtime_library","sha256":"63b7ffe6751afa18148d5f227b8c4505a931b2b780b8ad7f9611672acec79a23","signing_profile":"production_developer_id","size":722256},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"zlib.so","role":"runtime_library","sha256":"d9e011bd7f67af7c5747d96353598a32bbe284462ae834b0b09521400336b13f","signing_profile":"production_developer_id","size":64512}],"kind":"standalone_bundle","minimum_macos":"14.0","path":"runtime/darwin-x86_64/agent-collab-runtime.bundle","platform":"darwin","provider_runtime_version":"5.0.9","sha256":"5b72be61424c1f5d1de0f7e718bed72f148ec753ac050ae0156c8f4115257370","signing":{"hardened_runtime":true,"identity":"Developer ID Application: OSUMI CONSULTING LLC (36UFP9KY4T)","mode":"developer_id","require_notarization":true,"secure_timestamp":true,"team_id":"36UFP9KY4T"},"size":18673952,"wire_contract_sha256":"a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a"}],"channel":"production","contract_version":4,"protocol_version":5,"schema_version":4,"wire_contract":{"$defs":{"amount":{"additionalProperties":false,"properties":{"amount":{"minimum":0,"type":"number"},"unit":{"minLength":1,"type":"string"}},"required":["amount","unit"],"type":"object"},"work_unit":{"additionalProperties":false,"properties":{"capability":{"enum":["architecture.conceptual","architecture.repository","codegen.repository","context.documents.extract","context.documents.intent","context.documents.reason","context.repository.extract","context.repository.reason","frontend_codegen.repository","frontend_review.repository","governance.repository","review.repository"],"type":"string"},"context_size_estimate":{"description":"caller-estimated input tokens","minimum":0,"type":"integer"},"depends_on":{"items":{"maxLength":128,"minLength":1,"type":"string"},"maxItems":128,"type":"array"},"explicit_target":{"pattern":"^[a-z][a-z0-9_]{0,127}$","type":"string"},"id":{"maxLength":128,"minLength":1,"type":"string"},"native_restrictions":{"type":"object"},"output_size_estimate":{"description":"caller-estimated output tokens","minimum":0,"type":"integer"},"payload":{},"payload_ref":{"maxLength":128,"minLength":1,"type":"string"}},"required":["id","capability","depends_on"],"type":"object"}},"content_frame":{"additionalProperties":true,"properties":{"content":{"minLength":1,"type":"string"},"content_encoding":{"enum":["utf-8","base64"]},"content_kind":{"enum":["explicit final","recovered deltas"]},"content_truncated":{"type":"boolean"},"frame_type":{"const":"content"},"request_id":{"maxLength":128,"minLength":1,"type":"string"},"sequence":{"minimum":0,"type":"integer"},"work_unit_id":{"maxLength":128,"minLength":1,"type":"string"}},"required":["frame_type","request_id","work_unit_id","sequence","content","content_kind","content_encoding","content_truncated"],"type":"object"},"logical_action_timeout_modes":{"architecture.conceptual":"admitted_progress_inactivity","architecture.repository":"admitted_progress_inactivity","codegen.repository":"admitted_progress_inactivity","context.documents.extract":"admitted_progress_inactivity","context.documents.intent":"admitted_progress_inactivity","context.documents.reason":"admitted_progress_inactivity","context.repository.extract":"admitted_progress_inactivity","context.repository.reason":"admitted_progress_inactivity","frontend_codegen.repository":"admitted_progress_inactivity","frontend_review.repository":"admitted_progress_inactivity","governance.repository":"admitted_progress_inactivity","review.repository":"admitted_progress_inactivity"},"logical_actions":["architecture.conceptual","architecture.repository","codegen.repository","context.documents.extract","context.documents.intent","context.documents.reason","context.repository.extract","context.repository.reason","frontend_codegen.repository","frontend_review.repository","governance.repository","review.repository"],"logical_agents":["alibaba","claude","codex","deepseek","gemini","grok","moonshot","zhipu"],"routing_request":{"additionalProperties":false,"properties":{"budget_limit":{"$ref":"#/$defs/amount"},"deadline_ms":{"maximum":86400000,"minimum":0,"type":"integer"},"dispatch_requested":{"type":"boolean"},"effort_class":{"enum":["maximum","minimal","standard"],"type":"string"},"latency_value":{"$ref":"#/$defs/amount"},"max_parallel":{"maximum":128,"minimum":1,"type":"integer"},"quality_profile":{"enum":["economical","frontier","standard"],"type":"string"},"request_id":{"maxLength":128,"minLength":1,"type":"string"},"wire_contract_sha256":{"pattern":"^[0-9a-f]{64}$","type":"string"},"work_units":{"items":{"$ref":"#/$defs/work_unit"},"maxItems":128,"minItems":1,"type":"array"}},"required":["wire_contract_sha256","request_id","quality_profile","effort_class","max_parallel","dispatch_requested","work_units"],"type":"object"},"routing_source_sha256":"160d0453547447dd7279840ead0542843cfd7f60e547d89ac9e718e2f22d8ec1","runtime_protocol_version":5,"schema_version":12,"terminal_planning_record":{"additionalProperties":true,"properties":{"aggregate":{"type":"object"},"decisions":{"type":"array"},"frame_type":{"const":"terminal"},"request_id":{"maxLength":128,"minLength":1,"type":"string"},"waves":{"type":"array"}},"required":["frame_type","request_id","decisions","waves","aggregate"],"type":"object"}},"wire_contract_sha256":"a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a"}
+{"artifacts":[{"arch":"arm64","entrypoint":"agent-collab-runtime","files":[{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_blake2.so","role":"runtime_library","sha256":"0f0e9960d1c467c4d20693fb5988ee533a2f27f400510981e590efbbbad68618","signing_profile":"production_developer_id","size":89456},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_bz2.so","role":"runtime_library","sha256":"06432d60b4db75637183dc3d5ecc2f41c0741ff367267051a548666a286c5f51","signing_profile":"production_developer_id","size":72784},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_cn.so","role":"runtime_library","sha256":"a1148c393bb19b3abc8ef75802ea329dc65a08bdd5421ca9066d2cbddb31cd05","signing_profile":"production_developer_id","size":185264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_hk.so","role":"runtime_library","sha256":"7f4408d2ffe1e5181f27b90f0ed9b3c37387984f535b57904fd79b553bcd9b0c","signing_profile":"production_developer_id","size":185328},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_iso2022.so","role":"runtime_library","sha256":"e56ae6f6de281c3c9323fee4b64e8e0be2b9b0cc4de1a91f57ea1ab6c4fa737d","signing_profile":"production_developer_id","size":71936},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_jp.so","role":"runtime_library","sha256":"c2015d2cbdd6e5fa1254c3b7a1dd1865ac303571726a659d7d7d37d60359f0af","signing_profile":"production_developer_id","size":301120},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_kr.so","role":"runtime_library","sha256":"d8c478d97b851d5bcb0f739833504aced1ab40e1fe4346c9f827734b08fba152","signing_profile":"production_developer_id","size":168928},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_tw.so","role":"runtime_library","sha256":"78c4e1d28f9fffd945f16e78e210a821092f76a0f2e9bd6370674c7da98f51c3","signing_profile":"production_developer_id","size":168432},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_contextvars.so","role":"runtime_library","sha256":"2337046c8eb0ea8ef3b2eedbc85c8e96f2ce3f33ae827ab5ee15cdcc2326fdb7","signing_profile":"production_developer_id","size":68576},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_ctypes.so","role":"runtime_library","sha256":"3a0de1fb273e57f8cbc172d0454a8615e54d09b4a80ae3c386b3183a3413ecb0","signing_profile":"production_developer_id","size":175840},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_datetime.so","role":"runtime_library","sha256":"e9a7dca389b1cfc1ee12fbf31d71f6bf57f8f179e204fc5c3ad549d207be1b45","signing_profile":"production_developer_id","size":150144},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_decimal.so","role":"runtime_library","sha256":"2e77b431e8edeb38fa9d04262bdb8f45d5e14584a19b156cb74749bb2fd47bac","signing_profile":"production_developer_id","size":364640},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_heapq.so","role":"runtime_library","sha256":"b79583604a7f31eece020ccd5cee24303eb834a6c10607063ed42459cc85d8e0","signing_profile":"production_developer_id","size":69728},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_lzma.so","role":"runtime_library","sha256":"f5dbc96467a1e1e51aadda6b2fe1534690c124aea6a868bc689b5c4cd0ef7f97","signing_profile":"production_developer_id","size":92240},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_md5.so","role":"runtime_library","sha256":"2ff8b756851ae004a6c569756be4afebf67675bcf9d6c1c19534d952ea7b3135","signing_profile":"production_developer_id","size":71728},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multibytecodec.so","role":"runtime_library","sha256":"a51a095004dbfda8c21cb4aa5ab1c8e570eb043070ed7b7aef48e40d6571cb02","signing_profile":"production_developer_id","size":95808},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multiprocessing.so","role":"runtime_library","sha256":"1b3c206e0672337f5430825ca8cac26e6521dc25892dbef9e228dd98b8a50a7d","signing_profile":"production_developer_id","size":73472},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_opcode.so","role":"runtime_library","sha256":"2d4dd6f5af74704074e56879dd9c2063029d95292833d851c0ec22eee6e37653","signing_profile":"production_developer_id","size":72448},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_pickle.so","role":"runtime_library","sha256":"3cf56685b1ea252a82a9fcc31dcfa0e59e8d7d780390cb4a27c6b573d46b3913","signing_profile":"production_developer_id","size":168032},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixshmem.so","role":"runtime_library","sha256":"c51f3b5e028abee6eacf44aec04033a2da70a9c53dc260dc0a87f2422196d120","signing_profile":"production_developer_id","size":69408},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixsubprocess.so","role":"runtime_library","sha256":"6f1515541f75a0135dc66f6a986558589db31769d45df3d49d81f324e8f37159","signing_profile":"production_developer_id","size":72496},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_queue.so","role":"runtime_library","sha256":"e3b972c0ef54b4a447119204b61a7daa3b051699e56876d8e7b6cff1d3bf0064","signing_profile":"production_developer_id","size":71840},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_random.so","role":"runtime_library","sha256":"42ecc9e65c4f2969508caa5f5fe0f65c924021c6b4bb2cb1ab52b6f17539489c","signing_profile":"production_developer_id","size":71680},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_scproxy.so","role":"runtime_library","sha256":"f2b6035bed3231c4d477369afcc1182b30f9d14656cc51b52a88f3dd9475a5a1","signing_profile":"production_developer_id","size":71232},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha1.so","role":"runtime_library","sha256":"dfa7e9c49b8ba7d195ff9def4646dd5d839ea9cd2d35d8d5bb3a1685066e96b3","signing_profile":"production_developer_id","size":71760},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha2.so","role":"runtime_library","sha256":"c70abc7871bacc2cd41483ca1dc4654aa4c939062165a0b9b87e237f3bbc1509","signing_profile":"production_developer_id","size":107264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha3.so","role":"runtime_library","sha256":"e29eedabb8c2a7b2f66857141019075c38abb210fe53e5d4233e50c8a6616024","signing_profile":"production_developer_id","size":91008},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_socket.so","role":"runtime_library","sha256":"b791fa94f0c303bfac86ce3298669ecb0b777aebe51bca36cdca003fe68a6c0c","signing_profile":"production_developer_id","size":132288},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sqlite3.so","role":"runtime_library","sha256":"8ac1e5dca49c9d39a22417e911ada6d896c122029f7392b174a3ddb93a3e67c4","signing_profile":"production_developer_id","size":161264},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_statistics.so","role":"runtime_library","sha256":"11345ae014ce444e3ebd816b880775ce4a46d91e20a0d28fbc44e3591d653b5c","signing_profile":"production_developer_id","size":68704},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_struct.so","role":"runtime_library","sha256":"e0b6b96872128f0003dce8dcb5b524523c3de8ca2a781df0a588f7aa1d798ca0","signing_profile":"production_developer_id","size":94528},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_uuid.so","role":"runtime_library","sha256":"ed0ba00b1d991015b0aa512fb60805a96e18e9775551d993601080699fc1399a","signing_profile":"production_developer_id","size":68528},{"architecture":"arm64","install_mode":320,"macho_type":"executable","minimum_macos":"14.0","path":"agent-collab-runtime","role":"entrypoint","sha256":"54058e3330ceef4073aed9018c19dc7d24449a46ece4f287b3957daececc20a9","signing_profile":"production_developer_id","size":9195248},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"array.so","role":"runtime_library","sha256":"c6ebbfd0ba9f98e5505d61fcd6fe3b865e1f6c990fb20e7f9b61ae04ceb821d9","signing_profile":"production_developer_id","size":113760},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"binascii.so","role":"runtime_library","sha256":"a90de5b153bbd4fa9ce82b4f0d27eefebe82162ae817ac1c4c89fd107e9727e8","signing_profile":"production_developer_id","size":72224},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"fcntl.so","role":"runtime_library","sha256":"235095395811f4219bf94483f2ef0881aec14d7dd25f580a58f0c8d3f86f236f","signing_profile":"production_developer_id","size":70368},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"grp.so","role":"runtime_library","sha256":"802241d5eee0e44b68979184d8047a25f826be247885b79136a43d21fb5a0096","signing_profile":"production_developer_id","size":71024},{"architecture":"arm64","install_mode":320,"macho_type":"dylib","minimum_macos":"14.0","path":"libpython3.13.dylib","role":"runtime_library","sha256":"118d073e20b4e94c3ecf7cb6eff3e207efbdc4e9e814771284a3da2fa1a70368","signing_profile":"production_developer_id","size":4973360},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"math.so","role":"runtime_library","sha256":"db66420d8a2a0437c3f6c22226c9a83f28a26697f2725f259bef8c4ef3709e15","signing_profile":"production_developer_id","size":111216},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"mmap.so","role":"runtime_library","sha256":"1b168d3850f266158811d539bc179853ef284c713a3a21381ded78a92a571261","signing_profile":"production_developer_id","size":73776},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"pyexpat.so","role":"runtime_library","sha256":"d6f3d134201d7fc27bcfcda8ecff4152ecfa716e0f52849afcefcd0e231eabca","signing_profile":"production_developer_id","size":259232},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"select.so","role":"runtime_library","sha256":"807d4a7775ff625d5151f2e4722d45f599aaa0ec38b8e470eac7bcb91e28fdda","signing_profile":"production_developer_id","size":92160},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"termios.so","role":"runtime_library","sha256":"7ab2554682a6e0dc86ab272ed2f380bd49b336a8f2ca1930caf1bb2c103da558","signing_profile":"production_developer_id","size":71744},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"unicodedata.so","role":"runtime_library","sha256":"6a5cbf61eab1a9363cd1d27030a0796cd179c70de3d2ce8caa878d85e787b0a1","signing_profile":"production_developer_id","size":746848},{"architecture":"arm64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"zlib.so","role":"runtime_library","sha256":"0fc986eafa816ae74c7c3e63fec84594a9999f2b76d723b154969d10cbeef6bb","signing_profile":"production_developer_id","size":92896}],"kind":"standalone_bundle","minimum_macos":"14.0","path":"runtime/darwin-arm64/agent-collab-runtime.bundle","platform":"darwin","provider_runtime_version":"5.0.12","sha256":"aa7c62da15cc613ce8cb61e57507155577c325d7053727389f58b18cd752807c","signing":{"hardened_runtime":true,"identity":"Developer ID Application: OSUMI CONSULTING LLC (36UFP9KY4T)","mode":"developer_id","require_notarization":true,"secure_timestamp":true,"team_id":"36UFP9KY4T"},"size":19741760,"wire_contract_sha256":"a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a"},{"arch":"x86_64","entrypoint":"agent-collab-runtime","files":[{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_blake2.so","role":"runtime_library","sha256":"3eac829ea5492672eed01ce39afa3d20f28a7c71b6d050a38482210ae08dd184","signing_profile":"production_developer_id","size":60944},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_bz2.so","role":"runtime_library","sha256":"21a1e87339a103c3819040a0920372ffe19715114898c7c793594184b0d45f57","signing_profile":"production_developer_id","size":44256},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_cn.so","role":"runtime_library","sha256":"342382d5e068cff06e7ea7c996445989c8e4c88a20a89b8575748b7b3a9e3637","signing_profile":"production_developer_id","size":165584},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_hk.so","role":"runtime_library","sha256":"e160f30feb9e57fbbbe93c99307ae099518b03ae039fd3e30a14e19645fdcdd0","signing_profile":"production_developer_id","size":173904},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_iso2022.so","role":"runtime_library","sha256":"5c6a495bbc1885a3a736c36ef5b8e71bb79dbd69f4543c9e3c84b6e66fe7f206","signing_profile":"production_developer_id","size":43392},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_jp.so","role":"runtime_library","sha256":"f10c6ec7b0497c2dc8b134c3b902cf9e492a7e09168a7168c9418d3ef99d3dc4","signing_profile":"production_developer_id","size":273856},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_kr.so","role":"runtime_library","sha256":"8cf4af31503e09b068de6c8675a5ecaf8c240dc8973b2092750e18045a9b2786","signing_profile":"production_developer_id","size":153280},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_codecs_tw.so","role":"runtime_library","sha256":"929b120f70b63b5ac73def0ddba20bb4bcb92c794878f9d2c1bd54e1f4d9d9f5","signing_profile":"production_developer_id","size":132144},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_contextvars.so","role":"runtime_library","sha256":"e83802d2e15ee1fa60d3614badeb353b1d8a2738291fb38e713386950afe44a3","signing_profile":"production_developer_id","size":31712},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_ctypes.so","role":"runtime_library","sha256":"ab0d80932646b533c19730ff99decd76d44d6b54db04225fe044956d5e9427b9","signing_profile":"production_developer_id","size":148640},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_datetime.so","role":"runtime_library","sha256":"52efd187a447eff94c03ab9ce90b38ca0465cf71af196d212963a54427b18a36","signing_profile":"production_developer_id","size":122768},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_decimal.so","role":"runtime_library","sha256":"9ef091655487155cb059489694f57d73eb8ab0f8c7074ac146c9ecc9ecb2cf54","signing_profile":"production_developer_id","size":347632},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_heapq.so","role":"runtime_library","sha256":"8fa68a63bf32be7da5e7b685d3c7f7f6c724c8a43fe7ef500836e8da56cf9974","signing_profile":"production_developer_id","size":41120},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_lzma.so","role":"runtime_library","sha256":"205082105e4e2407dff9c93be4ec4c01f95e4760b623eece0676f88d44d8743e","signing_profile":"production_developer_id","size":55552},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_md5.so","role":"runtime_library","sha256":"f39873406e78f2c1d51c2b2482ef5d8facb861afdd8819ab308cef7c5de5598b","signing_profile":"production_developer_id","size":43136},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multibytecodec.so","role":"runtime_library","sha256":"bfcb7ca3b6c9349433152359149fee3882c98f7a000901194965b7662810bb35","signing_profile":"production_developer_id","size":63456},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_multiprocessing.so","role":"runtime_library","sha256":"da19004a2a8a5cafac5285b2907e32efa2b75414d255b359ebb2ea8c06add556","signing_profile":"production_developer_id","size":40768},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_opcode.so","role":"runtime_library","sha256":"40282751cb390172588c608abd3f28c6835092a840ad107291dbb7bdbc68c210","signing_profile":"production_developer_id","size":43872},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_pickle.so","role":"runtime_library","sha256":"3ce9744bee11559b9cc378048208dcc8562fb589094e40fb36d7866329ef4356","signing_profile":"production_developer_id","size":136096},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixshmem.so","role":"runtime_library","sha256":"04bfc8f3f85736aa39eb5df954b9725c2e27aed196f1344468f33cc60a6f3d64","signing_profile":"production_developer_id","size":32544},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_posixsubprocess.so","role":"runtime_library","sha256":"99e2a19f352d26e81d48f155f5934acc9cb03ea330fb158892ebab616d8ea2ad","signing_profile":"production_developer_id","size":43952},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_queue.so","role":"runtime_library","sha256":"404eda6d6ac199af92e27419925732ea7631aff97cd045d8cfb24429306ef657","signing_profile":"production_developer_id","size":39136},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_random.so","role":"runtime_library","sha256":"02258e3c637a9c3d24de8938dd05b4758a73dea0d3315ed21e4113608059e2ac","signing_profile":"production_developer_id","size":38944},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_scproxy.so","role":"runtime_library","sha256":"fec476a7d455fb35107602996df169ae0dff0d4b8214908fc6355e0f8bfd88a8","signing_profile":"production_developer_id","size":34368},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha1.so","role":"runtime_library","sha256":"b3776067bcc83ef07cc33be9112aa29bae15ddf6712b552b6eb6ff45e9a3e59a","signing_profile":"production_developer_id","size":39024},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha2.so","role":"runtime_library","sha256":"9aa2efaa15a2d3853bda12272553bd4184c065051f7f56d7d3ea4203ee932818","signing_profile":"production_developer_id","size":78992},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sha3.so","role":"runtime_library","sha256":"017df50887e2faf83adf62310ecc8e838b2c30b16e78fc2c5f9ad6259f2dc037","signing_profile":"production_developer_id","size":53632},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_socket.so","role":"runtime_library","sha256":"7f0bfad83a50e806c7a81a8c5e2615d8aea6f72c3b5d37bda0db8fc8494ec5f8","signing_profile":"production_developer_id","size":104096},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_sqlite3.so","role":"runtime_library","sha256":"8ca8c23e015749c07c47331a5aa05460cc28c7d2e3643f5105813207623b96a0","signing_profile":"production_developer_id","size":137312},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_statistics.so","role":"runtime_library","sha256":"fe950eeda0b6985d91fd57c06f0480a89d1f1a77da828d4d24a928597d0492ee","signing_profile":"production_developer_id","size":31840},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_struct.so","role":"runtime_library","sha256":"d835aaba0daa89a99cbd9266017cc22faf5e137366a1475400021e9bf20952a4","signing_profile":"production_developer_id","size":62144},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"_uuid.so","role":"runtime_library","sha256":"7986f6c2f6e9d349ea241d9d7e095892f381bd3c9941b6676a18cd71db2db336","signing_profile":"production_developer_id","size":31664},{"architecture":"x86_64","install_mode":320,"macho_type":"executable","minimum_macos":"14.0","path":"agent-collab-runtime","role":"entrypoint","sha256":"c3064b48f3e256872cd0d6265ba7020508f42362197eb71fa0d1a90e7f37285b","signing_profile":"production_developer_id","size":9430624},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"array.so","role":"runtime_library","sha256":"51d8b970ab70b8d1fdb49d5e1f57a382094395c3d455f36c565b17e1829cfba5","signing_profile":"production_developer_id","size":77216},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"binascii.so","role":"runtime_library","sha256":"895a1907d38fc1c834c62d5c3582b7d9f318d14d8be1de67d99f2c3be3547329","signing_profile":"production_developer_id","size":51920},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"fcntl.so","role":"runtime_library","sha256":"90de6d9ff745d1694b561783f621443fa9459657b3182fc2940d1350ad4a3372","signing_profile":"production_developer_id","size":41760},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"grp.so","role":"runtime_library","sha256":"5337431ffd08394e02ba0cf3bfb1e2453ff80bb645794f962cac029c550aae38","signing_profile":"production_developer_id","size":38288},{"architecture":"x86_64","install_mode":320,"macho_type":"dylib","minimum_macos":"14.0","path":"libpython3.13.dylib","role":"runtime_library","sha256":"acb8e7441dd693faa649d54c9af0ba8e7a805d33c3599ac4f395c228b83d66ef","signing_profile":"production_developer_id","size":4959200},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"math.so","role":"runtime_library","sha256":"bcb223b5c836a57e508a538daf20213ea6fead52a3988fb64e25de2455b044b5","signing_profile":"production_developer_id","size":87104},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"mmap.so","role":"runtime_library","sha256":"ea2a0a3d6854a54606df94c5b18d216075eb85226401cdb34d119ba315e07dad","signing_profile":"production_developer_id","size":49312},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"pyexpat.so","role":"runtime_library","sha256":"4d5d2a8edccfd183e841e522561e2ccd0c6656547b71bebf8c8c950471988b85","signing_profile":"production_developer_id","size":260688},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"select.so","role":"runtime_library","sha256":"8826ed43873e364bee2e8d6952465d2edb74ee1ad08bb30b912f3d4e071deefa","signing_profile":"production_developer_id","size":55504},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"termios.so","role":"runtime_library","sha256":"b95e81d938a48ee4e9b3734781a5aa32f88dbb4b645731b79ed8fd57f63744ff","signing_profile":"production_developer_id","size":43136},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"unicodedata.so","role":"runtime_library","sha256":"faaa7b04a1e6640d0ccb53a8e906a552952f00610f69fcc9c7e33c06d9e3e7af","signing_profile":"production_developer_id","size":722256},{"architecture":"x86_64","install_mode":320,"macho_type":"bundle","minimum_macos":"14.0","path":"zlib.so","role":"runtime_library","sha256":"3f3e84c80440a21302ca6b93a125159778e5147d4dd6e1b6a63cc77018145cab","signing_profile":"production_developer_id","size":64512}],"kind":"standalone_bundle","minimum_macos":"14.0","path":"runtime/darwin-x86_64/agent-collab-runtime.bundle","platform":"darwin","provider_runtime_version":"5.0.12","sha256":"e3888c61adb5180508252a46055a32d8d79610499f0c2c84d66d9c7c5cf856ba","signing":{"hardened_runtime":true,"identity":"Developer ID Application: OSUMI CONSULTING LLC (36UFP9KY4T)","mode":"developer_id","require_notarization":true,"secure_timestamp":true,"team_id":"36UFP9KY4T"},"size":18731280,"wire_contract_sha256":"a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a"}],"channel":"production","contract_version":4,"protocol_version":5,"schema_version":4,"wire_contract":{"$defs":{"amount":{"additionalProperties":false,"properties":{"amount":{"minimum":0,"type":"number"},"unit":{"minLength":1,"type":"string"}},"required":["amount","unit"],"type":"object"},"work_unit":{"additionalProperties":false,"properties":{"capability":{"enum":["architecture.conceptual","architecture.repository","codegen.repository","context.documents.extract","context.documents.intent","context.documents.reason","context.repository.extract","context.repository.reason","frontend_codegen.repository","frontend_review.repository","governance.repository","review.repository"],"type":"string"},"context_size_estimate":{"description":"caller-estimated input tokens","minimum":0,"type":"integer"},"depends_on":{"items":{"maxLength":128,"minLength":1,"type":"string"},"maxItems":128,"type":"array"},"explicit_target":{"pattern":"^[a-z][a-z0-9_]{0,127}$","type":"string"},"id":{"maxLength":128,"minLength":1,"type":"string"},"native_restrictions":{"type":"object"},"output_size_estimate":{"description":"caller-estimated output tokens","minimum":0,"type":"integer"},"payload":{},"payload_ref":{"maxLength":128,"minLength":1,"type":"string"}},"required":["id","capability","depends_on"],"type":"object"}},"content_frame":{"additionalProperties":true,"properties":{"content":{"minLength":1,"type":"string"},"content_encoding":{"enum":["utf-8","base64"]},"content_kind":{"enum":["explicit final","recovered deltas"]},"content_truncated":{"type":"boolean"},"frame_type":{"const":"content"},"request_id":{"maxLength":128,"minLength":1,"type":"string"},"sequence":{"minimum":0,"type":"integer"},"work_unit_id":{"maxLength":128,"minLength":1,"type":"string"}},"required":["frame_type","request_id","work_unit_id","sequence","content","content_kind","content_encoding","content_truncated"],"type":"object"},"logical_action_timeout_modes":{"architecture.conceptual":"admitted_progress_inactivity","architecture.repository":"admitted_progress_inactivity","codegen.repository":"admitted_progress_inactivity","context.documents.extract":"admitted_progress_inactivity","context.documents.intent":"admitted_progress_inactivity","context.documents.reason":"admitted_progress_inactivity","context.repository.extract":"admitted_progress_inactivity","context.repository.reason":"admitted_progress_inactivity","frontend_codegen.repository":"admitted_progress_inactivity","frontend_review.repository":"admitted_progress_inactivity","governance.repository":"admitted_progress_inactivity","review.repository":"admitted_progress_inactivity"},"logical_actions":["architecture.conceptual","architecture.repository","codegen.repository","context.documents.extract","context.documents.intent","context.documents.reason","context.repository.extract","context.repository.reason","frontend_codegen.repository","frontend_review.repository","governance.repository","review.repository"],"logical_agents":["alibaba","claude","codex","deepseek","gemini","grok","moonshot","zhipu"],"routing_request":{"additionalProperties":false,"properties":{"budget_limit":{"$ref":"#/$defs/amount"},"deadline_ms":{"maximum":86400000,"minimum":0,"type":"integer"},"dispatch_requested":{"type":"boolean"},"effort_class":{"enum":["maximum","minimal","standard"],"type":"string"},"latency_value":{"$ref":"#/$defs/amount"},"max_parallel":{"maximum":128,"minimum":1,"type":"integer"},"quality_profile":{"enum":["economical","frontier","standard"],"type":"string"},"request_id":{"maxLength":128,"minLength":1,"type":"string"},"wire_contract_sha256":{"pattern":"^[0-9a-f]{64}$","type":"string"},"work_units":{"items":{"$ref":"#/$defs/work_unit"},"maxItems":128,"minItems":1,"type":"array"}},"required":["wire_contract_sha256","request_id","quality_profile","effort_class","max_parallel","dispatch_requested","work_units"],"type":"object"},"routing_source_sha256":"160d0453547447dd7279840ead0542843cfd7f60e547d89ac9e718e2f22d8ec1","runtime_protocol_version":5,"schema_version":12,"terminal_planning_record":{"additionalProperties":true,"properties":{"aggregate":{"type":"object"},"decisions":{"type":"array"},"frame_type":{"const":"terminal"},"request_id":{"maxLength":128,"minLength":1,"type":"string"},"waves":{"type":"array"}},"required":["frame_type","request_id","decisions","waves","aggregate"],"type":"object"}},"wire_contract_sha256":"a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a"}
diff --git a/plugins/agent-collab/runtime-manifest.schema.json b/plugins/agent-collab/runtime-manifest.schema.json
index 406cd1bb..6d7a9b68 100644
--- a/plugins/agent-collab/runtime-manifest.schema.json
+++ b/plugins/agent-collab/runtime-manifest.schema.json
@@ -169,7 +169,7 @@
           "entrypoint": {"const": "agent-collab-runtime"},
           "size": {"type": "integer", "minimum": 1, "maximum": 67108864},
           "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
-          "provider_runtime_version": {"const": "5.0.9"},
+          "provider_runtime_version": {"const": "5.0.12"},
           "wire_contract_sha256": {"const": "a675807e0ff5f0544d7cc9d659914ce2dadac9be8efd0fb56635815e5c3e842a"},
           "files": {
             "type": "array",
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_blake2.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_blake2.so
index f7f79b65..af3321c2 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_blake2.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_blake2.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_bz2.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_bz2.so
index 3f58d3f3..3acdd5b7 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_bz2.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_bz2.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_cn.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_cn.so
index 068c9007..2237db65 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_cn.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_cn.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_hk.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_hk.so
index f4981a8f..3d4f4f75 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_hk.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_hk.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_iso2022.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_iso2022.so
index d80664a1..28c5f45d 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_iso2022.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_iso2022.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_jp.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_jp.so
index 11b9515a..a07229c4 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_jp.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_jp.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_kr.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_kr.so
index a7cb3239..78c2b4b1 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_kr.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_kr.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_tw.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_tw.so
index 3c288b8c..764e38a7 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_tw.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_codecs_tw.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_contextvars.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_contextvars.so
index 1272865b..0d2abd98 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_contextvars.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_contextvars.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_ctypes.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_ctypes.so
index 7a9d35ee..54f39665 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_ctypes.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_ctypes.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_datetime.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_datetime.so
index 4d75d579..dc7fafe7 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_datetime.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_datetime.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_decimal.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_decimal.so
index 1d266ac2..8f301b84 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_decimal.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_decimal.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_heapq.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_heapq.so
index 85a1198a..bcc38bfb 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_heapq.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_heapq.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_lzma.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_lzma.so
index 7807f407..548b985c 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_lzma.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_lzma.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_md5.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_md5.so
index ceb67e7d..d60736a9 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_md5.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_md5.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multibytecodec.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multibytecodec.so
index 6fc2a075..3facc25e 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multibytecodec.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multibytecodec.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multiprocessing.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multiprocessing.so
index 15c8a36a..6fd30ca7 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multiprocessing.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_multiprocessing.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_opcode.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_opcode.so
index 4a25bc85..b07c488a 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_opcode.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_opcode.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_pickle.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_pickle.so
index 1939a12f..c5da5019 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_pickle.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_pickle.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixshmem.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixshmem.so
index 09668f52..ead4de0f 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixshmem.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixshmem.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixsubprocess.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixsubprocess.so
index 895755bc..7ec76068 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixsubprocess.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_posixsubprocess.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_queue.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_queue.so
index 8f728d40..eb510a86 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_queue.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_queue.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_random.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_random.so
index 316d6d1f..f9ba654e 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_random.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_random.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_scproxy.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_scproxy.so
index 20fd3de7..fc91a942 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_scproxy.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_scproxy.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha1.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha1.so
index e7fbd827..104aebdc 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha1.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha1.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha2.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha2.so
index 8311ecd0..4fd81c74 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha2.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha2.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha3.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha3.so
index 17ac6eb7..6a97fbbe 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha3.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sha3.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_socket.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_socket.so
index a87bdd99..749c9190 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_socket.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_socket.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sqlite3.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sqlite3.so
index fe797299..52ae0370 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sqlite3.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_sqlite3.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_statistics.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_statistics.so
index 9dc190a6..236b76af 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_statistics.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_statistics.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_struct.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_struct.so
index e1ab1905..c9ea96d5 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_struct.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_struct.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_uuid.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_uuid.so
index 5aebe40e..2019ecec 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_uuid.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/_uuid.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/agent-collab-runtime b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/agent-collab-runtime
index 2aa06f3f..59b6094c 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/agent-collab-runtime and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/agent-collab-runtime differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/array.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/array.so
index c7a0c37c..594c3c04 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/array.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/array.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/binascii.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/binascii.so
index 25256812..aa539195 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/binascii.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/binascii.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/fcntl.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/fcntl.so
index e64ab6d2..b818bfea 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/fcntl.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/fcntl.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/grp.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/grp.so
index c60e285b..77416e8d 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/grp.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/grp.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/libpython3.13.dylib b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/libpython3.13.dylib
index 87cb646d..73029e9d 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/libpython3.13.dylib and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/libpython3.13.dylib differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/math.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/math.so
index d6665da4..d94258a9 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/math.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/math.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/mmap.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/mmap.so
index bdc792e0..e9f84e1b 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/mmap.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/mmap.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/pyexpat.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/pyexpat.so
index b0ff0c10..0f66f626 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/pyexpat.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/pyexpat.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/select.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/select.so
index b6fc72da..d1b980b9 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/select.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/select.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/termios.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/termios.so
index bb93a795..c658ad39 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/termios.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/termios.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/unicodedata.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/unicodedata.so
index 6d53549b..2eb2c015 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/unicodedata.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/unicodedata.so differ
diff --git a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/zlib.so b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/zlib.so
index 83cecfc9..42fa3a2f 100755
Binary files a/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/zlib.so and b/plugins/agent-collab/runtime/darwin-arm64/agent-collab-runtime.bundle/zlib.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_blake2.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_blake2.so
index e2f78a4e..362efc9a 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_blake2.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_blake2.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_bz2.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_bz2.so
index a086a351..be8e0789 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_bz2.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_bz2.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_cn.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_cn.so
index 15f8b913..ce2e861e 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_cn.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_cn.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_hk.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_hk.so
index ad8e948b..10d904d4 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_hk.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_hk.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_iso2022.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_iso2022.so
index 4fb30008..f0cc3820 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_iso2022.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_iso2022.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_jp.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_jp.so
index 1c03bfd8..57e5044b 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_jp.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_jp.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_kr.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_kr.so
index 3997d71f..a5664829 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_kr.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_kr.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_tw.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_tw.so
index 48bd79f6..d8179b07 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_tw.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_codecs_tw.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_contextvars.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_contextvars.so
index 07a80aad..e8a3b644 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_contextvars.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_contextvars.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_ctypes.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_ctypes.so
index 0421428e..49c6cecb 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_ctypes.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_ctypes.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_datetime.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_datetime.so
index 64d4eb4b..26ddb33c 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_datetime.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_datetime.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_decimal.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_decimal.so
index 487cd340..c7dc6304 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_decimal.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_decimal.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_heapq.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_heapq.so
index 460a3711..bbb2e0df 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_heapq.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_heapq.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_lzma.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_lzma.so
index 86cbe5c8..11d65c9c 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_lzma.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_lzma.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_md5.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_md5.so
index b8c77009..4fe06838 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_md5.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_md5.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multibytecodec.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multibytecodec.so
index 8b568f60..6941d7f4 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multibytecodec.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multibytecodec.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multiprocessing.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multiprocessing.so
index 2f5c1672..8ea1389a 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multiprocessing.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_multiprocessing.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_opcode.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_opcode.so
index c866a51e..5f9ac28a 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_opcode.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_opcode.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_pickle.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_pickle.so
index 5cc2125a..51527bbc 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_pickle.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_pickle.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixshmem.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixshmem.so
index f0af829f..dad60135 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixshmem.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixshmem.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixsubprocess.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixsubprocess.so
index 66785616..a6db0388 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixsubprocess.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_posixsubprocess.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_queue.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_queue.so
index b7fe7e28..412a6453 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_queue.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_queue.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_random.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_random.so
index 9380f4e3..7e054005 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_random.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_random.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_scproxy.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_scproxy.so
index 98de5ad4..6fb1b1b7 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_scproxy.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_scproxy.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha1.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha1.so
index 2d8dad12..d0693725 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha1.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha1.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha2.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha2.so
index 81d213bf..abcfeebd 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha2.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha2.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha3.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha3.so
index 09a74404..35819f66 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha3.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sha3.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_socket.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_socket.so
index cf6efbcd..535b65e5 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_socket.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_socket.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sqlite3.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sqlite3.so
index 366cbb39..7aae649a 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sqlite3.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_sqlite3.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_statistics.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_statistics.so
index 77fe110f..72756543 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_statistics.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_statistics.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_struct.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_struct.so
index 5e2b7b97..da47ba18 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_struct.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_struct.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_uuid.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_uuid.so
index 4ea94a2b..104dc118 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_uuid.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/_uuid.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/agent-collab-runtime b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/agent-collab-runtime
index e25f97b4..c7b3486d 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/agent-collab-runtime and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/agent-collab-runtime differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/array.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/array.so
index 60419c83..68d81f79 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/array.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/array.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/binascii.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/binascii.so
index a7b4332e..ea09bbe0 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/binascii.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/binascii.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/fcntl.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/fcntl.so
index 1e8a2da7..c631c267 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/fcntl.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/fcntl.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/grp.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/grp.so
index 61c30750..e4468b35 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/grp.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/grp.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/libpython3.13.dylib b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/libpython3.13.dylib
index 94c460e9..fda33853 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/libpython3.13.dylib and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/libpython3.13.dylib differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/math.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/math.so
index 4c901289..65f373d8 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/math.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/math.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/mmap.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/mmap.so
index 2ddc14bb..fa381f86 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/mmap.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/mmap.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/pyexpat.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/pyexpat.so
index 0096703d..335d57aa 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/pyexpat.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/pyexpat.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/select.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/select.so
index e3a487b6..d81e9e89 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/select.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/select.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/termios.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/termios.so
index 2fbfd27d..7fbf1baa 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/termios.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/termios.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/unicodedata.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/unicodedata.so
index 0aa44f81..c21ea4e5 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/unicodedata.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/unicodedata.so differ
diff --git a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/zlib.so b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/zlib.so
index 05a4cdc3..4976c605 100755
Binary files a/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/zlib.so and b/plugins/agent-collab/runtime/darwin-x86_64/agent-collab-runtime.bundle/zlib.so differ
diff --git a/plugins/agent-collab/runtime_client.py b/plugins/agent-collab/runtime_client.py
index ef1f9b5c..2b991fe1 100644
--- a/plugins/agent-collab/runtime_client.py
+++ b/plugins/agent-collab/runtime_client.py
@@ -34,7 +34,7 @@
 MANIFEST_SCHEMA_VERSION = 4
 PROTOCOL_VERSION = 5
 CONTRACT_VERSION = 4
-PROVIDER_RUNTIME_VERSION = "5.0.9"
+PROVIDER_RUNTIME_VERSION = "5.0.12"
 MAX_MANIFEST_BYTES = 1024 * 1024
 MAX_REQUEST_BYTES = 48 * 1024 * 1024
 MAX_RESPONSE_BYTES = 4 * 1024 * 1024
diff --git a/plugins/agent-collab/skills/agent-readiness/SKILL.md b/plugins/agent-collab/skills/agent-readiness/SKILL.md
index 3ac622bb..906e4c08 100644
--- a/plugins/agent-collab/skills/agent-readiness/SKILL.md
+++ b/plugins/agent-collab/skills/agent-readiness/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: agent-readiness
-version: 7.0.8
+version: 7.0.9
 description: Evaluate whether an agent, model, CLI, plugin, or role is ready for a proposed responsibility. Use when the user says "agent readiness," "is this agent ready," "can Codex be primary," "can Grok handle this role," "promote this agent," "evaluate this worker," "review model readiness," or "/agent-collab:agent-readiness." Also offer this proactively before assigning a new primary, reviewer, worker, delegate, headless, release, or merge-related role to Claude, Codex, Antigravity/Gemini, Grok, or a future agent.
 ---
 
diff --git a/plugins/agent-collab/skills/agent-runtime-status/SKILL.md b/plugins/agent-collab/skills/agent-runtime-status/SKILL.md
index 01cbbfbe..048b98b2 100644
--- a/plugins/agent-collab/skills/agent-runtime-status/SKILL.md
+++ b/plugins/agent-collab/skills/agent-runtime-status/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: agent-runtime-status
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Use when the user says "agent runtime status," "check agent runtime
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Agent runtime status
diff --git a/plugins/agent-collab/skills/ai-writing-auditor/SKILL.md b/plugins/agent-collab/skills/ai-writing-auditor/SKILL.md
index 3fb9e815..7e7d49a2 100644
--- a/plugins/agent-collab/skills/ai-writing-auditor/SKILL.md
+++ b/plugins/agent-collab/skills/ai-writing-auditor/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: ai-writing-auditor
-version: 7.0.8
+version: 7.0.9
 description: Audits prose for the tells of machine-generated writing and rewrites it to read as if a careful human wrote it, without softening the actual content. Use when the user says "de-AI this text", "audit this writing for AI patterns", "make this read human", or "/agent-collab:ai-writing-auditor." Also offer this proactively when a piece of customer-facing or published prose is dense with the stock phrasing and mechanical structure typical of unedited model output.
 ---
 
diff --git a/plugins/agent-collab/skills/architect/SKILL.md b/plugins/agent-collab/skills/architect/SKILL.md
index bbd9a70c..38e7ac2b 100644
--- a/plugins/agent-collab/skills/architect/SKILL.md
+++ b/plugins/agent-collab/skills/architect/SKILL.md
@@ -1,12 +1,12 @@
 ---
 name: architect
-version: 7.0.8
+version: 7.0.9
 description: Request read-only architecture consultation for codebase analysis, system design, implementation planning, decomposition, or long-horizon strategy. Use when the user says "ask the architect," "have Grok design this," "architecture consultation," "plan this implementation," or "/agent-collab:architect." Also offer this before a substantial multi-system implementation where an additional architecture pass can reduce rework.
 ---
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Architecture consultation
diff --git a/plugins/agent-collab/skills/architecture-review/SKILL.md b/plugins/agent-collab/skills/architecture-review/SKILL.md
index ec467d4c..8d6452f2 100644
--- a/plugins/agent-collab/skills/architecture-review/SKILL.md
+++ b/plugins/agent-collab/skills/architecture-review/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: architecture-review
-version: 7.0.8
+version: 7.0.9
 description: Self-executed sweep of a codebase for module-deepening opportunities — shallow interfaces, scattered locality, untestable seams — presented as a visual report the user picks a candidate from, then explored interactively. Unlike `architect` (routed consultation) and `code-review` (diff review), this skill is run by the active primary on the whole codebase. Use when the user says "architecture review," "find deepening opportunities," "where is this codebase getting muddy," "improve the architecture," or "/agent-collab:architecture-review." Also offer this proactively when repeated friction in a working session traces to shallow modules — bouncing between many files to follow one concept, or tests that cannot reach behavior through the current interfaces.
 ---
 
diff --git a/plugins/agent-collab/skills/autonomy-readiness/SKILL.md b/plugins/agent-collab/skills/autonomy-readiness/SKILL.md
index 5b4112f8..7d3d2ded 100644
--- a/plugins/agent-collab/skills/autonomy-readiness/SKILL.md
+++ b/plugins/agent-collab/skills/autonomy-readiness/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: autonomy-readiness
-version: 7.0.8
+version: 7.0.9
 description: Evaluate whether an autonomous, always-on, scheduled, headless, or self-evolving workflow is ready to run safely. Use when the user says "autonomy readiness," "activation gate review," "is this workflow ready to run autonomously," "go/no-go autonomy," "always-on readiness," "headless operation review," or "/agent-collab:autonomy-readiness." Also offer this proactively before enabling background agents, recurring automations, auto-merge/self-evolution, external actions, unattended host runs, or any workflow that can continue without a human watching.
 ---
 
diff --git a/plugins/agent-collab/skills/brainstorm/SKILL.md b/plugins/agent-collab/skills/brainstorm/SKILL.md
index 7b68f7a7..5564d956 100644
--- a/plugins/agent-collab/skills/brainstorm/SKILL.md
+++ b/plugins/agent-collab/skills/brainstorm/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: brainstorm
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: economical
   effort_class: minimal
@@ -10,7 +10,7 @@ description: Use the reviewer as a divergent-thinking partner to widen the optio
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Brainstorm — divergent ideation with a selected partner
diff --git a/plugins/agent-collab/skills/chain-configurator/SKILL.md b/plugins/agent-collab/skills/chain-configurator/SKILL.md
index 2a5c7cce..ba5d7e58 100644
--- a/plugins/agent-collab/skills/chain-configurator/SKILL.md
+++ b/plugins/agent-collab/skills/chain-configurator/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: chain-configurator
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: standard
   effort_class: standard
diff --git a/plugins/agent-collab/skills/chain/SKILL.md b/plugins/agent-collab/skills/chain/SKILL.md
index abecb4a6..31dad541 100644
--- a/plugins/agent-collab/skills/chain/SKILL.md
+++ b/plugins/agent-collab/skills/chain/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: chain
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: standard
   effort_class: standard
diff --git a/plugins/agent-collab/skills/code-review/SKILL.md b/plugins/agent-collab/skills/code-review/SKILL.md
index 49dbfd3c..889bcc18 100644
--- a/plugins/agent-collab/skills/code-review/SKILL.md
+++ b/plugins/agent-collab/skills/code-review/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: code-review
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Send a code diff, pull request, file, or directory to the reviewer
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 When a completed or terminated read-only review or governance attempt definitively produced no substantive result and no uncertain external mutation, retain that failed attempt as evidence. The caller may then issue at most one new corrected request as a new work unit after fixing a demonstrated setup defect with already authorized context and tools, such as inlining an inaccessible external plan or using an already available interpreter. Keep the same source hash, provider, and known-distinct reviewer requirements, and the original identical authorized scope. The allowance is one correction total per original request across all descendant work units; a corrected work unit cannot issue another correction or reset the allowance. Retain the original-request identity and both attempts in the caller's trace. Do not copy login profiles or expand permissions. This is not a replay, retry, or failover of the consumed work unit, not a runtime automatic retry, and not a provider switch to evade findings. Do not use it to repair formatting or missing lineage, or when failure is unproven or a native mutation is ambiguous. If findings or usable partial content exist, interpret them instead. Native one-process completion remains separate.
 
@@ -189,6 +189,14 @@ Additionally:
 
 Ignore style and formatting. Verify each finding against the actual code — do not flag plausible-sounding issues that are not present.
 
+For a blocker about an external API contract, cite the exact called method in
+the supplied or installed implementation, or matching official documentation
+for the relevant version. Check wrapper serialization and method-specific
+overloads before asserting a native or FFI type requirement. If that evidence
+is unavailable, state the uncertainty and the smallest read-only verification
+needed; do not present a remembered contract as a confirmed blocker. Proposed
+fake-client assertions must match the actual method interface.
+
 For each real finding, include severity, path, line when available, the defect,
 a concrete fix, and any applicable spec reference in the descriptor-owned
 finding message. If no real issues surface, explain what was checked in the
diff --git a/plugins/agent-collab/skills/compose-skills/SKILL.md b/plugins/agent-collab/skills/compose-skills/SKILL.md
index d5609ef5..20b71aea 100644
--- a/plugins/agent-collab/skills/compose-skills/SKILL.md
+++ b/plugins/agent-collab/skills/compose-skills/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: compose-skills
-version: 7.0.8
+version: 7.0.9
 description: Use when the user says "compose skills," "which skills should I use," "select a recipe," "combine these skills," or "/agent-collab:compose-skills." Also offer this when a task needs multiple lenses and benefits from explicit context, fan-out, authority, and stop-condition limits.
 ---
 
diff --git a/plugins/agent-collab/skills/context/SKILL.md b/plugins/agent-collab/skills/context/SKILL.md
index 02d59a9c..8ba50648 100644
--- a/plugins/agent-collab/skills/context/SKILL.md
+++ b/plugins/agent-collab/skills/context/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: context
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Use when the user says "summarize these documents," "extract this c
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Source-grounded context
diff --git a/plugins/agent-collab/skills/data-engineer/SKILL.md b/plugins/agent-collab/skills/data-engineer/SKILL.md
index 836177b2..6fa4bb72 100644
--- a/plugins/agent-collab/skills/data-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/data-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: data-engineer
-version: 7.0.8
+version: 7.0.9
 description: Builds and hardens the pipelines and warehouse structures that move data from source systems to the people and systems that consume it. Use when the user says "build the ETL pipeline", "design the dbt models", "orchestrate this pipeline", or "design the warehouse schema", or "/agent-collab:data-engineer." Also offer this proactively when a pipeline lacks idempotency, has no data-quality checks, or moves data through undocumented schema contracts.
 ---
 
diff --git a/plugins/agent-collab/skills/debate/SKILL.md b/plugins/agent-collab/skills/debate/SKILL.md
index bc9fba59..7f64f037 100644
--- a/plugins/agent-collab/skills/debate/SKILL.md
+++ b/plugins/agent-collab/skills/debate/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: debate
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Stage a structured multi-round adversarial debate between the activ
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 When a completed or terminated read-only review or governance attempt definitively produced no substantive result and no uncertain external mutation, retain that failed attempt as evidence. The caller may then issue at most one new corrected request as a new work unit after fixing a demonstrated setup defect with already authorized context and tools, such as inlining an inaccessible external plan or using an already available interpreter. Keep the same source hash, provider, and known-distinct reviewer requirements, and the original identical authorized scope. The allowance is one correction total per original request across all descendant work units; a corrected work unit cannot issue another correction or reset the allowance. Retain the original-request identity and both attempts in the caller's trace. Do not copy login profiles or expand permissions. This is not a replay, retry, or failover of the consumed work unit, not a runtime automatic retry, and not a provider switch to evade findings. Do not use it to repair formatting or missing lineage, or when failure is unproven or a native mutation is ambiguous. If findings or usable partial content exist, interpret them instead. Native one-process completion remains separate.
 
diff --git a/plugins/agent-collab/skills/decision-map/SKILL.md b/plugins/agent-collab/skills/decision-map/SKILL.md
index 549ad116..2270e494 100644
--- a/plugins/agent-collab/skills/decision-map/SKILL.md
+++ b/plugins/agent-collab/skills/decision-map/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: decision-map
-version: 7.0.8
+version: 7.0.9
 description: Plan an effort too large for one session as a shared map of decision tickets on the repo's issue tracker, then resolve them one per session until the way to the destination is clear. Use when the user says "decision map," "chart this effort," "map out this project," "break this fog into tickets," "work the map," or "/agent-collab:decision-map." Also offer this proactively when a request is a loose multi-session idea whose route is not yet visible — where the open questions outnumber the known steps and a single planning pass would either stall or guess.
 ---
 
diff --git a/plugins/agent-collab/skills/delegate/SKILL.md b/plugins/agent-collab/skills/delegate/SKILL.md
index 3f35c538..47d497e4 100644
--- a/plugins/agent-collab/skills/delegate/SKILL.md
+++ b/plugins/agent-collab/skills/delegate/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: delegate
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: economical
   effort_class: minimal
@@ -10,7 +10,7 @@ description: Fan out summary, extraction, or analysis subtasks over supplied bou
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Delegate — fan out independent subtasks for parallel advisory work
diff --git a/plugins/agent-collab/skills/dev-delegate/SKILL.md b/plugins/agent-collab/skills/dev-delegate/SKILL.md
index 0c01913d..fd94e99d 100644
--- a/plugins/agent-collab/skills/dev-delegate/SKILL.md
+++ b/plugins/agent-collab/skills/dev-delegate/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: dev-delegate
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: standard
   effort_class: standard
@@ -10,7 +10,7 @@ description: Delegate a bounded independent development slice to an eligible wor
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Dev-delegate
@@ -30,6 +30,16 @@ the frontmatter defaults suit a small routine patch. Supply token estimates
 when known, and use dependencies only for real ordering. The runtime resolves a
 current compatible portfolio member without persisting a model selection.
 
+Set a supported top-level `deadline_ms` for bounded work; omission uses the
+24-hour default. Production codegen uses an admitted-progress inactivity lease,
+so valid progress can renew it. A prose duration is an expectation, not a hard
+runtime limit. Choose primary-owned validation by default, or provide the exact
+preverified interpreter and focused command for a worker check. Do not ask the
+worker to change global aliases; provide a verified process-local `PATH` when
+the check launches a child interpreter by a generic name. Do not ask the
+worker to search for environments or install dependencies; a missing optional
+dependency must be reported without blocking a coherent partial patch.
+
 Record observed worker lineage and its source when available; otherwise label
 it lineage-unverified. Same-family and unverified worker output remains advisory;
 role or route selection does not prove cross-family coverage. This does not
@@ -38,5 +48,8 @@ prevent ordinary development work or replace required independent review.
 After the attempt, the caller captures a binary-safe diff from the disposable
 copy, preserves every nonempty raw or recovered response, verifies the source
 head did not change, and removes the copy. Treat the diff and reported tests as
-untrusted. The primary reviews/applies the accepted diff and runs independent
-tests. Never infer a patch, receipt, approval, or cleanup from process exit.
+untrusted. The primary reviews/applies the accepted diff and independently
+validates it. If the caller stops an attempt, one caller owns cancellation and
+verifies the runtime's cleanup; preserve partial content and identify caller
+cancellation accurately. Never infer a patch, receipt, approval, cleanup, or
+provider outage from process exit. Never replay the consumed work unit.
diff --git a/plugins/agent-collab/skills/elixir-engineer/SKILL.md b/plugins/agent-collab/skills/elixir-engineer/SKILL.md
index 99848df5..bffc85d4 100644
--- a/plugins/agent-collab/skills/elixir-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/elixir-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: elixir-engineer
-version: 7.0.8
+version: 7.0.9
 description: Senior Elixir and OTP engineer for fault-tolerant, concurrent, and Phoenix-based systems. Use when the user says "review this supervision tree", "why did this GenServer crash", "help me design this OTP process architecture", or "/agent-collab:elixir-engineer." Also offer this proactively when a change adds a new process, alters a restart strategy, or touches a Phoenix channel or LiveView boundary.
 ---
 
diff --git a/plugins/agent-collab/skills/eval-engineer/SKILL.md b/plugins/agent-collab/skills/eval-engineer/SKILL.md
index 37f751e0..5d7fd4d8 100644
--- a/plugins/agent-collab/skills/eval-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/eval-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: eval-engineer
-version: 7.0.8
+version: 7.0.9
 description: Designs evaluation suites and scoring methods that measure whether an AI-backed workflow is actually good enough to ship. Use when the user says "design evals for this", "build an eval suite", "how should we measure this workflow", or "/agent-collab:eval-engineer." Also offer this proactively when a project ships a prompt, retrieval pipeline, or agent workflow with no structured way to tell whether a change made it better or worse.
 ---
 
diff --git a/plugins/agent-collab/skills/go-engineer/SKILL.md b/plugins/agent-collab/skills/go-engineer/SKILL.md
index 87c0fad0..442e2417 100644
--- a/plugins/agent-collab/skills/go-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/go-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: go-engineer
-version: 7.0.8
+version: 7.0.9
 description: Senior Go engineer for concurrent, service-oriented, and cloud-native code. Use when the user says "review this Go service for concurrency bugs", "help me design this Go interface", "why is this goroutine leaking", or "/agent-collab:go-engineer." Also offer this proactively when a change adds a goroutine, channel, or context-cancellation path without an obvious termination guarantee.
 ---
 
diff --git a/plugins/agent-collab/skills/governance-review/SKILL.md b/plugins/agent-collab/skills/governance-review/SKILL.md
index 60a85f5b..29c682f1 100644
--- a/plugins/agent-collab/skills/governance-review/SKILL.md
+++ b/plugins/agent-collab/skills/governance-review/SKILL.md
@@ -1,12 +1,12 @@
 ---
 name: governance-review
-version: 7.0.8
+version: 7.0.9
 description: Use when the operator says "governance review," "high-stakes review," "authoritative verdict," or "tiebreaker." Also offer this when reviewer-family independence and an exact repository-grounded verdict must be enforced.
 ---
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 When a completed or terminated read-only review or governance attempt definitively produced no substantive result and no uncertain external mutation, retain that failed attempt as evidence. The caller may then issue at most one new corrected request as a new work unit after fixing a demonstrated setup defect with already authorized context and tools, such as inlining an inaccessible external plan or using an already available interpreter. Keep the same source hash, provider, and known-distinct reviewer requirements, and the original identical authorized scope. The allowance is one correction total per original request across all descendant work units; a corrected work unit cannot issue another correction or reset the allowance. Retain the original-request identity and both attempts in the caller's trace. Do not copy login profiles or expand permissions. This is not a replay, retry, or failover of the consumed work unit, not a runtime automatic retry, and not a provider switch to evade findings. Do not use it to repair formatting or missing lineage, or when failure is unproven or a native mutation is ambiguous. If findings or usable partial content exist, interpret them instead. Native one-process completion remains separate.
 
diff --git a/plugins/agent-collab/skills/hallucination-investigator/SKILL.md b/plugins/agent-collab/skills/hallucination-investigator/SKILL.md
index 021c8dfa..cdf0f9ca 100644
--- a/plugins/agent-collab/skills/hallucination-investigator/SKILL.md
+++ b/plugins/agent-collab/skills/hallucination-investigator/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: hallucination-investigator
-version: 7.0.8
+version: 7.0.9
 description: Traces a specific wrong or fabricated AI output back to its root cause in context, retrieval, prompting, or tool use, and recommends the most targeted fix. Use when the user says "why is it hallucinating", "investigate this fabrication", "trace this wrong answer", or "/agent-collab:hallucination-investigator." Also offer this proactively when a factuality failure has been reported but no one has yet reconstructed why the system produced that specific wrong answer.
 ---
 
diff --git a/plugins/agent-collab/skills/incident-responder/SKILL.md b/plugins/agent-collab/skills/incident-responder/SKILL.md
index 1eb9f4fb..6d223818 100644
--- a/plugins/agent-collab/skills/incident-responder/SKILL.md
+++ b/plugins/agent-collab/skills/incident-responder/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: incident-responder
-version: 7.0.8
+version: 7.0.9
 description: Leads live incident response — triage, containment, evidence-driven root-cause analysis, and postmortem writeups for active outages or breaches. Use when the user says "we have an incident", "production is down", or "run the postmortem for this outage", or "/agent-collab:incident-responder." Also offer this proactively when the user is trying to write the incident timeline or communicate status while a service disruption is still unresolved.
 ---
 
diff --git a/plugins/agent-collab/skills/intent-check/SKILL.md b/plugins/agent-collab/skills/intent-check/SKILL.md
index c39b6c97..9d95d414 100644
--- a/plugins/agent-collab/skills/intent-check/SKILL.md
+++ b/plugins/agent-collab/skills/intent-check/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: intent-check
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: standard
   effort_class: standard
@@ -10,7 +10,7 @@ description: Verify that the active primary's interpretation matches the operato
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Intent check - advisory interpretation comparison
diff --git a/plugins/agent-collab/skills/knowledge-compile/SKILL.md b/plugins/agent-collab/skills/knowledge-compile/SKILL.md
index 20a99e30..d3316d6c 100644
--- a/plugins/agent-collab/skills/knowledge-compile/SKILL.md
+++ b/plugins/agent-collab/skills/knowledge-compile/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: knowledge-compile
-version: 7.0.8
+version: 7.0.9
 description: Compile multiple sources into a durable, cited knowledge dossier without mixing claims, assumptions, and decisions. Use when the user says "compile knowledge," "build a dossier," "create a knowledge base," "synthesize these sources," "preserve research context," "make this reviewable later," or "/agent-collab:knowledge-compile." Also offer this proactively when a task spans several repos, PRs, papers, articles, logs, agent messages, or drafts and future agents need source-separated context for independent review.
 ---
 
diff --git a/plugins/agent-collab/skills/kubernetes-specialist/SKILL.md b/plugins/agent-collab/skills/kubernetes-specialist/SKILL.md
index 8bd75be2..a16da67d 100644
--- a/plugins/agent-collab/skills/kubernetes-specialist/SKILL.md
+++ b/plugins/agent-collab/skills/kubernetes-specialist/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: kubernetes-specialist
-version: 7.0.8
+version: 7.0.9
 description: Designs, hardens, and troubleshoots Kubernetes clusters and the workloads running on them. Use when the user says "review this Kubernetes manifest", "why is my pod crash-looping", or "help me design a multi-tenant cluster", or "/agent-collab:kubernetes-specialist." Also offer this proactively when a change touches Deployment/StatefulSet/DaemonSet specs, RBAC bindings, network policies, or persistent volume claims.
 ---
 
diff --git a/plugins/agent-collab/skills/learning-loop/SKILL.md b/plugins/agent-collab/skills/learning-loop/SKILL.md
index dea4b4af..fba11155 100644
--- a/plugins/agent-collab/skills/learning-loop/SKILL.md
+++ b/plugins/agent-collab/skills/learning-loop/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: learning-loop
-version: 7.0.8
+version: 7.0.9
 description: Capture durable lessons, errors, and verified fixes in a project-local learning ledger, consult it before re-deriving known failures, and track recurrence toward promotion, using the bundled deterministic learning_ledger.py CLI. Use when the user says "capture this lesson", "log this error to the ledger", "check the learning ledger", "record a recurrence", "any known fix for this?", or "/agent-collab:learning-loop." Also offer this proactively when the same failure recurs across sessions, or when a hard-won diagnosis is about to be lost because it lives only in one session's context.
 ---
 
diff --git a/plugins/agent-collab/skills/llm-architect/SKILL.md b/plugins/agent-collab/skills/llm-architect/SKILL.md
index b1b33443..edd9a206 100644
--- a/plugins/agent-collab/skills/llm-architect/SKILL.md
+++ b/plugins/agent-collab/skills/llm-architect/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: llm-architect
-version: 7.0.8
+version: 7.0.9
 description: Designs the structural shape of an LLM-powered system — how context is assembled, how tools and retrieval are wired in, and how output flows to the caller. Use when the user says "design the RAG pipeline", "plan the agent architecture", or "help me structure the prompt pipeline", or "/agent-collab:llm-architect." Also offer this proactively when a project is wiring multiple prompts, tools, and retrieval steps together without a clear contract between them.
 ---
 
diff --git a/plugins/agent-collab/skills/logic-check/SKILL.md b/plugins/agent-collab/skills/logic-check/SKILL.md
index 258486a6..b3788fd3 100644
--- a/plugins/agent-collab/skills/logic-check/SKILL.md
+++ b/plugins/agent-collab/skills/logic-check/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: logic-check
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Audit a verifiable, step-wise computation (arithmetic, financial ca
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 When a completed or terminated read-only review or governance attempt definitively produced no substantive result and no uncertain external mutation, retain that failed attempt as evidence. The caller may then issue at most one new corrected request as a new work unit after fixing a demonstrated setup defect with already authorized context and tools, such as inlining an inaccessible external plan or using an already available interpreter. Keep the same source hash, provider, and known-distinct reviewer requirements, and the original identical authorized scope. The allowance is one correction total per original request across all descendant work units; a corrected work unit cannot issue another correction or reset the allowance. Retain the original-request identity and both attempts in the caller's trace. Do not copy login profiles or expand permissions. This is not a replay, retry, or failover of the consumed work unit, not a runtime automatic retry, and not a provider switch to evade findings. Do not use it to repair formatting or missing lineage, or when failure is unproven or a native mutation is ambiguous. If findings or usable partial content exist, interpret them instead. Native one-process completion remains separate.
 
diff --git a/plugins/agent-collab/skills/merge-resolve/SKILL.md b/plugins/agent-collab/skills/merge-resolve/SKILL.md
index 9c291dcc..8e7914f8 100644
--- a/plugins/agent-collab/skills/merge-resolve/SKILL.md
+++ b/plugins/agent-collab/skills/merge-resolve/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: merge-resolve
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Use when a user asks to resolve a git merge conflict or conflicting
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Merge resolve — merge-conflict resolution, operator-gated by default
diff --git a/plugins/agent-collab/skills/migration-doctor/SKILL.md b/plugins/agent-collab/skills/migration-doctor/SKILL.md
index 21392553..285016bc 100644
--- a/plugins/agent-collab/skills/migration-doctor/SKILL.md
+++ b/plugins/agent-collab/skills/migration-doctor/SKILL.md
@@ -1,12 +1,12 @@
 ---
 name: migration-doctor
-version: 7.0.8
+version: 7.0.9
 description: Use when the user says "migration doctor," "check old collaboration plugins," "verify agent-collab migration," or "/agent-collab:migration-doctor." Also offer this after installing or updating agent-collab, when direct runtime invocation is blocked, or when a retired package may still be active.
 ---
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Migration doctor
diff --git a/plugins/agent-collab/skills/mlops-engineer/SKILL.md b/plugins/agent-collab/skills/mlops-engineer/SKILL.md
index f8017f33..40d0e9d9 100644
--- a/plugins/agent-collab/skills/mlops-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/mlops-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: mlops-engineer
-version: 7.0.8
+version: 7.0.9
 description: Designs and hardens the infrastructure that carries models from training through production serving. Use when the user says "set up a model registry", "build the training pipeline", "deploy this model to production", or "/agent-collab:mlops-engineer." Also offer this proactively when a project trains or serves models but has no versioned artifacts, no promotion gate, or no monitoring for prediction quality.
 ---
 
diff --git a/plugins/agent-collab/skills/orchestrate/SKILL.md b/plugins/agent-collab/skills/orchestrate/SKILL.md
index de33ec1f..9dc73253 100644
--- a/plugins/agent-collab/skills/orchestrate/SKILL.md
+++ b/plugins/agent-collab/skills/orchestrate/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: orchestrate
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: standard
   effort_class: standard
@@ -10,7 +10,7 @@ description: Coordinate a multi-step task through a bounded task graph with expl
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Orchestrate a bounded task graph
diff --git a/plugins/agent-collab/skills/postgres-engineer/SKILL.md b/plugins/agent-collab/skills/postgres-engineer/SKILL.md
index 318bd7ae..5635db11 100644
--- a/plugins/agent-collab/skills/postgres-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/postgres-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: postgres-engineer
-version: 7.0.8
+version: 7.0.9
 description: Administers and hardens PostgreSQL at the engine level — configuration, replication, vacuum behavior, and locking under real workloads. Use when the user says "tune postgres for this workload", "design a vacuum strategy", "set up replication", or "fix our connection pooling", or "/agent-collab:postgres-engineer." Also offer this proactively when a PostgreSQL deployment shows replication lag, bloat, connection exhaustion, or a failover plan that has never been tested.
 ---
 
diff --git a/plugins/agent-collab/skills/project-estimation/SKILL.md b/plugins/agent-collab/skills/project-estimation/SKILL.md
index 5b8612c9..c683e454 100644
--- a/plugins/agent-collab/skills/project-estimation/SKILL.md
+++ b/plugins/agent-collab/skills/project-estimation/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: project-estimation
-version: 7.0.8
+version: 7.0.9
 description: Use when the user says "estimate this project", "estimate the wall-clock time and cost", "scope this enhancement", "reconcile this estimate with actuals", "calibrate project estimates", or "audit the estimation data"; or when asking how long an agent-led project will take, its API-equivalent token cost, why an estimate missed, or whether evidence supports a delivery range. Also use while creating or materially revising a formal implementation design or formal implementation plan.
 ---
 
diff --git a/plugins/agent-collab/skills/project-knowledge/SKILL.md b/plugins/agent-collab/skills/project-knowledge/SKILL.md
index a73f5663..8d6f6b70 100644
--- a/plugins/agent-collab/skills/project-knowledge/SKILL.md
+++ b/plugins/agent-collab/skills/project-knowledge/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: project-knowledge
-version: 7.0.8
+version: 7.0.9
 description: Build and maintain a durable, project-local knowledge base with provenance-tracked sources, injection-linted pages, and a generated index, using the bundled deterministic knowledge_tool.py CLI. Use when the user says "build a project knowledge base", "set up a knowledge layer", "register this source", "draft a knowledge page", "lint the knowledge pages", "regenerate the knowledge index", "export a knowledge bundle", or "/agent-collab:project-knowledge." Also offer this proactively when agent memory limits truncate project context across sessions, or when the same sources keep being re-read and re-synthesized because no durable, citable project-local record exists.
 ---
 
diff --git a/plugins/agent-collab/skills/prompt-regression-tester/SKILL.md b/plugins/agent-collab/skills/prompt-regression-tester/SKILL.md
index f8e6d523..45066ae1 100644
--- a/plugins/agent-collab/skills/prompt-regression-tester/SKILL.md
+++ b/plugins/agent-collab/skills/prompt-regression-tester/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: prompt-regression-tester
-version: 7.0.8
+version: 7.0.9
 description: Builds and runs comparison suites that catch behavioral drift when a prompt, model, or workflow configuration changes. Use when the user says "did the prompt change regress anything", "compare these prompt versions", "regression-test this prompt change", or "/agent-collab:prompt-regression-tester." Also offer this proactively when someone is about to swap a prompt, model, or tool wiring in a live workflow without a way to check whether existing behavior held.
 ---
 
diff --git a/plugins/agent-collab/skills/prototype/SKILL.md b/plugins/agent-collab/skills/prototype/SKILL.md
index 87a1e50a..7478247a 100644
--- a/plugins/agent-collab/skills/prototype/SKILL.md
+++ b/plugins/agent-collab/skills/prototype/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: prototype
-version: 7.0.8
+version: 7.0.9
 description: Build a throwaway prototype that answers one design question — an interactive terminal app to pressure-test a state model or logic shape, or several radically different UI variants on one route. Use when the user says "prototype this," "sanity-check this state model," "show me a few options for this page," "mock up some variations," or "/agent-collab:prototype." Also offer this proactively when a design conversation is circling a question that a runnable artifact would settle in minutes — how a state machine handles an awkward case, or which of several layouts actually works with real data.
 ---
 
diff --git a/plugins/agent-collab/skills/qa-verify/SKILL.md b/plugins/agent-collab/skills/qa-verify/SKILL.md
index 2ffcecdc..1e04c3f6 100644
--- a/plugins/agent-collab/skills/qa-verify/SKILL.md
+++ b/plugins/agent-collab/skills/qa-verify/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: qa-verify
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: economical
   effort_class: minimal
@@ -10,7 +10,7 @@ description: Ask the reviewer to QA the output of a completed execution against
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 When a completed or terminated read-only review or governance attempt definitively produced no substantive result and no uncertain external mutation, retain that failed attempt as evidence. The caller may then issue at most one new corrected request as a new work unit after fixing a demonstrated setup defect with already authorized context and tools, such as inlining an inaccessible external plan or using an already available interpreter. Keep the same source hash, provider, and known-distinct reviewer requirements, and the original identical authorized scope. The allowance is one correction total per original request across all descendant work units; a corrected work unit cannot issue another correction or reset the allowance. Retain the original-request identity and both attempts in the caller's trace. Do not copy login profiles or expand permissions. This is not a replay, retry, or failover of the consumed work unit, not a runtime automatic retry, and not a provider switch to evade findings. Do not use it to repair formatting or missing lineage, or when failure is unproven or a native mutation is ambiguous. If findings or usable partial content exist, interpret them instead. Native one-process completion remains separate.
 
diff --git a/plugins/agent-collab/skills/red-team/SKILL.md b/plugins/agent-collab/skills/red-team/SKILL.md
index c76a6e5b..e3bdcd02 100644
--- a/plugins/agent-collab/skills/red-team/SKILL.md
+++ b/plugins/agent-collab/skills/red-team/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: red-team
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Task the reviewer with actively breaking a system, API, validation
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 When a completed or terminated read-only review or governance attempt definitively produced no substantive result and no uncertain external mutation, retain that failed attempt as evidence. The caller may then issue at most one new corrected request as a new work unit after fixing a demonstrated setup defect with already authorized context and tools, such as inlining an inaccessible external plan or using an already available interpreter. Keep the same source hash, provider, and known-distinct reviewer requirements, and the original identical authorized scope. The allowance is one correction total per original request across all descendant work units; a corrected work unit cannot issue another correction or reset the allowance. Retain the original-request identity and both attempts in the caller's trace. Do not copy login profiles or expand permissions. This is not a replay, retry, or failover of the consumed work unit, not a runtime automatic retry, and not a provider switch to evade findings. Do not use it to repair formatting or missing lineage, or when failure is unproven or a native mutation is ambiguous. If findings or usable partial content exist, interpret them instead. Native one-process completion remains separate.
 
diff --git a/plugins/agent-collab/skills/route/SKILL.md b/plugins/agent-collab/skills/route/SKILL.md
index a4cea7ff..7352e373 100644
--- a/plugins/agent-collab/skills/route/SKILL.md
+++ b/plugins/agent-collab/skills/route/SKILL.md
@@ -1,12 +1,12 @@
 ---
 name: route
-version: 7.0.8
+version: 7.0.9
 description: Use when the operator says "ask Codex," "target Gemini," "target Grok," "target Moonshot," "target Zhipu," or explicitly names a collaboration agent. Also offer this when a semantic action needs a provider-neutral plan or a truthful typed availability decision.
 ---
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Route a semantic collaboration request
diff --git a/plugins/agent-collab/skills/rust-engineer/SKILL.md b/plugins/agent-collab/skills/rust-engineer/SKILL.md
index 67aa7308..a4a74c54 100644
--- a/plugins/agent-collab/skills/rust-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/rust-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: rust-engineer
-version: 7.0.8
+version: 7.0.9
 description: Senior Rust engineer for ownership-heavy, performance-sensitive, and systems-level code. Use when the user says "review this Rust code for soundness", "help me fix this borrow checker error", "optimize this Rust hot path", or "/agent-collab:rust-engineer." Also offer this proactively when a diff introduces unsafe blocks, changes lifetime bounds, or touches an async task's cancellation path.
 ---
 
diff --git a/plugins/agent-collab/skills/second-opinion/SKILL.md b/plugins/agent-collab/skills/second-opinion/SKILL.md
index ff93786d..af4503a2 100644
--- a/plugins/agent-collab/skills/second-opinion/SKILL.md
+++ b/plugins/agent-collab/skills/second-opinion/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: second-opinion
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
@@ -10,7 +10,7 @@ description: Send a draft, analysis, plan, or decision to the reviewer for a rev
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 When a completed or terminated read-only review or governance attempt definitively produced no substantive result and no uncertain external mutation, retain that failed attempt as evidence. The caller may then issue at most one new corrected request as a new work unit after fixing a demonstrated setup defect with already authorized context and tools, such as inlining an inaccessible external plan or using an already available interpreter. Keep the same source hash, provider, and known-distinct reviewer requirements, and the original identical authorized scope. The allowance is one correction total per original request across all descendant work units; a corrected work unit cannot issue another correction or reset the allowance. Retain the original-request identity and both attempts in the caller's trace. Do not copy login profiles or expand permissions. This is not a replay, retry, or failover of the consumed work unit, not a runtime automatic retry, and not a provider switch to evade findings. Do not use it to repair formatting or missing lineage, or when failure is unproven or a native mutation is ambiguous. If findings or usable partial content exist, interpret them instead. Native one-process completion remains separate.
 
diff --git a/plugins/agent-collab/skills/simulate-user/SKILL.md b/plugins/agent-collab/skills/simulate-user/SKILL.md
index f0dac379..cf159bb8 100644
--- a/plugins/agent-collab/skills/simulate-user/SKILL.md
+++ b/plugins/agent-collab/skills/simulate-user/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: simulate-user
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: economical
   effort_class: minimal
@@ -10,7 +10,7 @@ description: Cast the reviewer into a strict roleplay as a user persona or stake
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Simulate-user — in-character persona reaction to an artifact
diff --git a/plugins/agent-collab/skills/sql-engineer/SKILL.md b/plugins/agent-collab/skills/sql-engineer/SKILL.md
index aa1edb0d..2e1d053d 100644
--- a/plugins/agent-collab/skills/sql-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/sql-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: sql-engineer
-version: 7.0.8
+version: 7.0.9
 description: Senior SQL specialist for query design, query optimization, and schema-aware performance work across relational databases. Use when the user says "optimize this SQL query", "explain this query plan", "design these indexes", or "/agent-collab:sql-engineer." Also offer this proactively when a diff adds a new query against a large table, changes a join or aggregation, or introduces a schema change that could affect an existing access pattern.
 ---
 
diff --git a/plugins/agent-collab/skills/sre-engineer/SKILL.md b/plugins/agent-collab/skills/sre-engineer/SKILL.md
index 4f60b2bb..d923df59 100644
--- a/plugins/agent-collab/skills/sre-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/sre-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: sre-engineer
-version: 7.0.8
+version: 7.0.9
 description: Builds and improves system reliability through SLO design, error-budget policy, toil reduction, and resilience architecture. Use when the user says "help me define SLOs for this service", "what's our error budget burn rate", or "reduce the toil in this on-call rotation", or "/agent-collab:sre-engineer." Also offer this proactively when a reliability review, capacity plan, or alert-quality audit is warranted ahead of a launch or growth milestone.
 ---
 
diff --git a/plugins/agent-collab/skills/start-inbox-monitor/SKILL.md b/plugins/agent-collab/skills/start-inbox-monitor/SKILL.md
index e87ad161..d8dec817 100644
--- a/plugins/agent-collab/skills/start-inbox-monitor/SKILL.md
+++ b/plugins/agent-collab/skills/start-inbox-monitor/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: start-inbox-monitor
-version: 7.0.8
+version: 7.0.9
 description: Use when the user says "start the inbox monitor", "keep monitoring agent messages", or "/agent-collab:start-inbox-monitor", or when an active cross-agent thread needs durable session-scoped inbox monitoring. Select the native Codex, Claude, or Antigravity lifecycle instead of inventing a universal polling loop.
 ---
 
diff --git a/plugins/agent-collab/skills/teamwork/SKILL.md b/plugins/agent-collab/skills/teamwork/SKILL.md
index 54a6d4a4..dc0d92e2 100644
--- a/plugins/agent-collab/skills/teamwork/SKILL.md
+++ b/plugins/agent-collab/skills/teamwork/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: teamwork
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: standard
   effort_class: standard
@@ -10,7 +10,7 @@ description: Coordinate a small role-based team for a multi-milestone task. Use
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Teamwork
diff --git a/plugins/agent-collab/skills/terraform-engineer/SKILL.md b/plugins/agent-collab/skills/terraform-engineer/SKILL.md
index 12a48139..04bc74d5 100644
--- a/plugins/agent-collab/skills/terraform-engineer/SKILL.md
+++ b/plugins/agent-collab/skills/terraform-engineer/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: terraform-engineer
-version: 7.0.8
+version: 7.0.9
 description: Designs, refactors, and reviews Terraform infrastructure-as-code across cloud providers, with a focus on module contracts, state safety, and reviewable plans. Use when the user says "review this Terraform plan", "help me design a reusable module", or "why did this apply want to replace my resource", or "/agent-collab:terraform-engineer." Also offer this proactively when a change touches module interfaces, state backend configuration, or resource lifecycle blocks.
 ---
 
diff --git a/plugins/agent-collab/skills/ui-to-code/SKILL.md b/plugins/agent-collab/skills/ui-to-code/SKILL.md
index 811a959d..b1df97dd 100644
--- a/plugins/agent-collab/skills/ui-to-code/SKILL.md
+++ b/plugins/agent-collab/skills/ui-to-code/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: ui-to-code
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
diff --git a/plugins/agent-collab/skills/untrusted-audit/SKILL.md b/plugins/agent-collab/skills/untrusted-audit/SKILL.md
index 2645b2aa..15548d87 100644
--- a/plugins/agent-collab/skills/untrusted-audit/SKILL.md
+++ b/plugins/agent-collab/skills/untrusted-audit/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: untrusted-audit
-version: 7.0.8
+version: 7.0.9
 description: Audit an external or untrusted source before using it in code, skills, plugins, workflows, prompts, or operations. Use when the user says "audit this untrusted source," "can we use this repo," "review this gist," "prompt injection audit," "is this plugin safe," "evaluate this methodology," or "/agent-collab:untrusted-audit." Also offer this proactively when a task would incorporate third-party instructions, code, scripts, hooks, generated skills, package manifests, install steps, or auto-updated methodology into the workspace or agent environment.
 ---
 
diff --git a/plugins/agent-collab/skills/visual-review/SKILL.md b/plugins/agent-collab/skills/visual-review/SKILL.md
index 4f1b769b..02d9e21e 100644
--- a/plugins/agent-collab/skills/visual-review/SKILL.md
+++ b/plugins/agent-collab/skills/visual-review/SKILL.md
@@ -1,6 +1,6 @@
 ---
 name: visual-review
-version: 7.0.8
+version: 7.0.9
 defaults:
   quality_profile: frontier
   effort_class: maximum
diff --git a/plugins/agent-collab/skills/worker/SKILL.md b/plugins/agent-collab/skills/worker/SKILL.md
index d09ea625..21037e18 100644
--- a/plugins/agent-collab/skills/worker/SKILL.md
+++ b/plugins/agent-collab/skills/worker/SKILL.md
@@ -1,12 +1,12 @@
 ---
 name: worker
-version: 7.0.8
+version: 7.0.9
 description: Use when the operator says "delegate this implementation," "generate a private patch," "use Grok for codegen," or "use Moonshot for frontend work." Also offer this when a bounded non-governance task needs output-only code generation without access to the caller checkout.
 ---
 
 ## Unified runtime invocation
 
-Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
+Resolve the **plugin root** from this loaded file: `SKILL.md` is at `<plugin-root>/skills/<skill-name>/SKILL.md`. Invoke only `python3 "<plugin-root>/coordinator.py"` and send one bounded JSON routing request on EOF-delimited stdin, without a PTY. Use the Python invocation example in the **Routing request** section in `<plugin-root>/README.md` and the co-packaged manifest's signed `wire_contract`; never invent fields or provider actions. Supply one caller-defined work unit per independently useful deliverable, with this skill's logical action and a bounded opaque payload. Use `depends_on` only for actual dependencies. Honor an operator-named provider with `explicit_target`. For an authorized independent review or governance task without an operator-named provider, also use that field to bind the caller-verified distinct reviewer selected by the caller or designated by the workflow. Carry the same target into planning and live dispatch; verify returned response-scoped native evidence before accepting independence. Otherwise use normal untargeted routing. Choose quality and effort for the workload; include context/output token estimates when known. The coordinator fills the installed wire digest and reads each working directory's current device/inode at dispatch. For a repository action, name the exact source directory as `native_restrictions.cwd`; if omitted, a read-only action is bound to the caller's repository or a linked worktree of it, never elsewhere. Read the result's `repairs` list. The runtime owns its timeout; do not wrap it in a shorter fixed timeout. Repository identity, source-head verification, disposable copies, patch capture, and cleanup remain caller-owned where applicable. For bounded delegation, explicitly set the supported top-level `deadline_ms`; omitting it uses the 24-hour default. Production actions use an admitted-progress inactivity lease, so this is not a hard total-duration limit: valid progress can renew it. Treat prose duration estimates as expectations, not runtime limits. The caller owns any decision to cancel and verifies the runtime's cleanup; preserve partial content and classify caller cancellation accurately. Never replay the consumed work unit or infer provider outage from cancellation. The shim runs standalone from the installed plugin and transports the routing client's bounded result without semantic interpretation. Never discover a provider executable, reconstruct a raw command, or replay, retry, or fail over a consumed work unit. Provider status, terminal records, receipts, telemetry, and other structured fields are optional diagnostics; none is a content-availability gate. Preserve every returned content record or recovered partial response and interpret it with ordinary model reasoning. Never synthesize approval, authority, or a receipt from process exit or missing diagnostics. Let the native runtime complete its own turns and tool recovery within the original invocation. Keep the OS account's canonical HOME and native configuration; do not create copied login profiles or replacement runtimes. Carry existing operator authorization across tool steps for the same action, source, provider, and scope; do not ask for it again merely because a diagnostic or tool boundary occurred. A planning-only request sets `dispatch_requested=false`; a live request sets it true and consumes at most one provider attempt per work unit.
 Planning reports route eligibility, not model identity, live availability, or authentication. Report a caller/client failure at that layer; provider state remains unknown unless native evidence establishes it. Content availability and each work unit's `execution_status` are separate facts.
 
 # Delegate bounded worker output
@@ -19,16 +19,66 @@ The caller creates a disposable repository copy, records its source head and
 filesystem identity, and supplies that directory as the work unit's native cwd.
 Provide a bounded prompt and an explicit target only when requested. Never send
 a model name, provider CLI version, provider transport action, tool list, or raw
-command.
+provider invocation.
 Send closed `quality_profile` and `effort_class` fields chosen for the workload.
 Split independently useful deliverables into bounded work units, use dependencies
 only for real ordering, and supply context/output token estimates when known.
 Standard suits routine work; demanding implementation and validation need a
 corresponding quality and effort choice.
 
+For a bounded task, set a supported top-level `deadline_ms` explicitly; if
+omitted, the runtime default is 24 hours. For example, a ten-minute inactivity
+lease is `deadline_ms=600000`. This is not a promised completion time: production
+codegen uses admitted-progress inactivity, so valid progress can renew the
+lease. State any prose duration as an expectation, not a hard runtime limit.
+
+Choose one validation handoff before dispatch:
+
+- **Primary-owned validation (default):** ask for the patch and a concise report
+  of checks that were not run. The primary runs the focused checks.
+- **Worker check:** supply the exact preverified interpreter path and focused
+  command, with its working directory and source imports bound to the disposable
+  copy. If the command launches a child with a generic interpreter name,
+  supply and verify a process-local `PATH` that resolves it to the same
+  interpreter. Run one bounded import/version preflight with that context.
+  Do not ask the worker to find an
+  interpreter or environment. If the preflight or a required import fails, the
+  worker reports the missing prerequisite and continues with a coherent partial
+  patch when possible. No installation, home-wide search, cache search, or
+  sibling-checkout search.
+
+Produce a coherent first patch after the necessary source reads. Optional test
+dependencies are not a prerequisite for beginning edits.
+
+For bounded delegation, one request can be shaped like this; use the README's
+Python invocation example to submit it:
+
+```python
+request = {
+    "wire_contract_sha256": manifest["wire_contract_sha256"],
+    "request_id": request_id,
+    "quality_profile": "standard",
+    "effort_class": "standard",
+    "deadline_ms": 600000,
+    "max_parallel": 1,
+    "dispatch_requested": True,
+    "work_units": [{
+        "id": "patch",
+        "capability": "codegen.repository",
+        "depends_on": [],
+        "payload": brief,
+        "native_restrictions": {"cwd": str(disposable_repository)},
+    }],
+}
+```
+
 The provider may inspect, edit, and test only the disposable copy. The caller
 preserves every nonempty raw or recovered response, captures the binary-safe
 diff, verifies the recorded source head, and removes the copy. Provider
 formatting and optional diagnostics do not gate content recovery. The primary
-reviews and applies accepted changes, runs independent tests, and owns commits,
-PRs, merges, and deployment. Never infer a patch or cleanup from process exit.
+reviews and applies accepted changes, independently validates them, and owns
+commits, PRs, merges, and deployment. If the caller decides to stop an attempt,
+one caller owns cancellation and verifies the runtime's cleanup; retain partial
+content and record caller cancellation as such. Never infer a patch or cleanup
+from process exit. Never replay the consumed work unit or describe cancellation
+as a provider outage.
diff --git a/scripts/build_skills.py b/scripts/build_skills.py
index ff66256a..e49d9094 100644
--- a/scripts/build_skills.py
+++ b/scripts/build_skills.py
@@ -274,7 +274,14 @@ def inject_runtime_invocation(spec_name: str, rendered: str) -> str:
         "the result's `repairs` list. The runtime owns its timeout; do not wrap it in a "
         "shorter fixed timeout. Repository identity, source-head "
         "verification, disposable copies, patch capture, and cleanup remain "
-        "caller-owned where applicable. "
+        "caller-owned where applicable. For bounded delegation, explicitly set "
+        "the supported top-level `deadline_ms`; omitting it uses the 24-hour "
+        "default. Production actions use an admitted-progress inactivity lease, "
+        "so this is not a hard total-duration limit: valid progress can renew it. "
+        "Treat prose duration estimates as expectations, not runtime limits. The "
+        "caller owns any decision to cancel and verifies the runtime's cleanup; "
+        "preserve partial content and classify caller cancellation accurately. Never replay the "
+        "consumed work unit or infer provider outage from cancellation. "
     ) + suffix + (
         "A planning-only request sets `dispatch_requested=false`; a live request "
         "sets it true and consumes at most one provider attempt per work unit.\n"
diff --git a/scripts/skill-build-config.json b/scripts/skill-build-config.json
index 30dc3dc2..eb48b54a 100644
--- a/scripts/skill-build-config.json
+++ b/scripts/skill-build-config.json
@@ -18,7 +18,7 @@
     "tier_flash_resolves_to_claude": "not a managed review route; Claude is managed only for document intent and host-owned async review is separate",
     "tier_pro_resolves_to_gemini": "an eligible managed Google-family reviewer with frontier quality and maximum effort",
     "tier_flash_resolves_to_gemini": "an eligible managed Google-family reviewer with economical quality and minimal effort",
-    "skill_version": "7.0.8",
+    "skill_version": "7.0.9",
     "agent_runtime_status_defaults_block": "defaults:\n  quality_profile: frontier\n  effort_class: maximum\n",
     "merge_resolve_defaults_block": "defaults:\n  quality_profile: frontier\n  effort_class: maximum\n",
     "merge_resolve_call_params": "with `quality_profile='frontier'` and `effort_class='maximum'`",
diff --git a/scripts/test_stage_runtime_handoff.py b/scripts/test_stage_runtime_handoff.py
index a326d283..7f7f296e 100644
--- a/scripts/test_stage_runtime_handoff.py
+++ b/scripts/test_stage_runtime_handoff.py
@@ -49,7 +49,7 @@ def _candidate_manifest(base: dict[str, object]) -> dict[str, object]:
     ).encode("utf-8")
     base["wire_contract_sha256"] = hashlib.sha256(encoded).hexdigest()
     for artifact in base.get("artifacts", []):
-        artifact["provider_runtime_version"] = "5.0.9"
+        artifact["provider_runtime_version"] = "5.0.12"
         artifact["wire_contract_sha256"] = base["wire_contract_sha256"]
     return base
 
@@ -80,7 +80,7 @@ def _manifest_bytes(payload: bytes, arch: str = "arm64") -> bytes:
             "entrypoint": "agent-collab-runtime",
             "size": len(payload),
             "sha256": archive_builder.runtime_bundle.compute_bundle_identity([record]),
-            "provider_runtime_version": "5.0.9",
+            "provider_runtime_version": "5.0.12",
             "wire_contract_sha256": base["wire_contract_sha256"],
             "signing": {
                 "mode": "developer_id",
@@ -149,7 +149,7 @@ def _make_matrix_handoff(parent: Path, name: str) -> tuple[Path, dict[Path, byte
                 "sha256": archive_builder.runtime_bundle.compute_bundle_identity(
                     [record]
                 ),
-                "provider_runtime_version": "5.0.9",
+                "provider_runtime_version": "5.0.12",
                 "wire_contract_sha256": base["wire_contract_sha256"],
                 "signing": {
                     "mode": "developer_id",
@@ -412,7 +412,7 @@ def test_import_reports_expected_and_received_provider_version(self) -> None:
 
             with self.assertRaisesRegex(
                 ValueError,
-                "provider version mismatch: expected 5\\.0\\.9, received 9\\.9\\.9",
+                "provider version mismatch: expected 5\\.0\\.12, received 9\\.9\\.9",
             ):
                 importer.stage_runtime_handoff(handoff, repo_root=repo)
 
diff --git a/scripts/test_verify_project_estimation_maintenance.py b/scripts/test_verify_project_estimation_maintenance.py
index 5cce694d..0441cd07 100644
--- a/scripts/test_verify_project_estimation_maintenance.py
+++ b/scripts/test_verify_project_estimation_maintenance.py
@@ -157,7 +157,7 @@ def _candidate_runtime_manifest(plugin: Path) -> None:
     ).encode("utf-8")
     manifest["wire_contract_sha256"] = hashlib.sha256(encoded).hexdigest()
     for artifact in manifest["artifacts"]:
-        artifact["provider_runtime_version"] = "5.0.9"
+        artifact["provider_runtime_version"] = "5.0.12"
         artifact["wire_contract_sha256"] = manifest["wire_contract_sha256"]
     _write_json(path, manifest)
 
diff --git a/skill-specs/code-review.md b/skill-specs/code-review.md
index b8b85fbf..2f1795d3 100644
--- a/skill-specs/code-review.md
+++ b/skill-specs/code-review.md
@@ -180,6 +180,14 @@ Additionally:
 
 Ignore style and formatting. Verify each finding against the actual code — do not flag plausible-sounding issues that are not present.
 
+For a blocker about an external API contract, cite the exact called method in
+the supplied or installed implementation, or matching official documentation
+for the relevant version. Check wrapper serialization and method-specific
+overloads before asserting a native or FFI type requirement. If that evidence
+is unavailable, state the uncertainty and the smallest read-only verification
+needed; do not present a remembered contract as a confirmed blocker. Proposed
+fake-client assertions must match the actual method interface.
+
 For each real finding, include severity, path, line when available, the defect,
 a concrete fix, and any applicable spec reference in the descriptor-owned
 finding message. If no real issues surface, explain what was checked in the
diff --git a/skill-specs/dev-delegate.md b/skill-specs/dev-delegate.md
index 89843b3e..e46c2e49 100644
--- a/skill-specs/dev-delegate.md
+++ b/skill-specs/dev-delegate.md
@@ -22,6 +22,16 @@ the frontmatter defaults suit a small routine patch. Supply token estimates
 when known, and use dependencies only for real ordering. The runtime resolves a
 current compatible portfolio member without persisting a model selection.
 
+Set a supported top-level `deadline_ms` for bounded work; omission uses the
+24-hour default. Production codegen uses an admitted-progress inactivity lease,
+so valid progress can renew it. A prose duration is an expectation, not a hard
+runtime limit. Choose primary-owned validation by default, or provide the exact
+preverified interpreter and focused command for a worker check. Do not ask the
+worker to change global aliases; provide a verified process-local `PATH` when
+the check launches a child interpreter by a generic name. Do not ask the
+worker to search for environments or install dependencies; a missing optional
+dependency must be reported without blocking a coherent partial patch.
+
 Record observed worker lineage and its source when available; otherwise label
 it lineage-unverified. Same-family and unverified worker output remains advisory;
 role or route selection does not prove cross-family coverage. This does not
@@ -30,5 +40,8 @@ prevent ordinary development work or replace required independent review.
 After the attempt, the caller captures a binary-safe diff from the disposable
 copy, preserves every nonempty raw or recovered response, verifies the source
 head did not change, and removes the copy. Treat the diff and reported tests as
-untrusted. The primary reviews/applies the accepted diff and runs independent
-tests. Never infer a patch, receipt, approval, or cleanup from process exit.
+untrusted. The primary reviews/applies the accepted diff and independently
+validates it. If the caller stops an attempt, one caller owns cancellation and
+verifies the runtime's cleanup; preserve partial content and identify caller
+cancellation accurately. Never infer a patch, receipt, approval, cleanup, or
+provider outage from process exit. Never replay the consumed work unit.
diff --git a/skill-specs/worker.md b/skill-specs/worker.md
index a7c3411f..ecdcaf86 100644
--- a/skill-specs/worker.md
+++ b/skill-specs/worker.md
@@ -14,16 +14,66 @@ The caller creates a disposable repository copy, records its source head and
 filesystem identity, and supplies that directory as the work unit's native cwd.
 Provide a bounded prompt and an explicit target only when requested. Never send
 a model name, provider CLI version, provider transport action, tool list, or raw
-command.
+provider invocation.
 Send closed `quality_profile` and `effort_class` fields chosen for the workload.
 Split independently useful deliverables into bounded work units, use dependencies
 only for real ordering, and supply context/output token estimates when known.
 Standard suits routine work; demanding implementation and validation need a
 corresponding quality and effort choice.
 
+For a bounded task, set a supported top-level `deadline_ms` explicitly; if
+omitted, the runtime default is 24 hours. For example, a ten-minute inactivity
+lease is `deadline_ms=600000`. This is not a promised completion time: production
+codegen uses admitted-progress inactivity, so valid progress can renew the
+lease. State any prose duration as an expectation, not a hard runtime limit.
+
+Choose one validation handoff before dispatch:
+
+- **Primary-owned validation (default):** ask for the patch and a concise report
+  of checks that were not run. The primary runs the focused checks.
+- **Worker check:** supply the exact preverified interpreter path and focused
+  command, with its working directory and source imports bound to the disposable
+  copy. If the command launches a child with a generic interpreter name,
+  supply and verify a process-local `PATH` that resolves it to the same
+  interpreter. Run one bounded import/version preflight with that context.
+  Do not ask the worker to find an
+  interpreter or environment. If the preflight or a required import fails, the
+  worker reports the missing prerequisite and continues with a coherent partial
+  patch when possible. No installation, home-wide search, cache search, or
+  sibling-checkout search.
+
+Produce a coherent first patch after the necessary source reads. Optional test
+dependencies are not a prerequisite for beginning edits.
+
+For bounded delegation, one request can be shaped like this; use the README's
+Python invocation example to submit it:
+
+```python
+request = {
+    "wire_contract_sha256": manifest["wire_contract_sha256"],
+    "request_id": request_id,
+    "quality_profile": "standard",
+    "effort_class": "standard",
+    "deadline_ms": 600000,
+    "max_parallel": 1,
+    "dispatch_requested": True,
+    "work_units": [{
+        "id": "patch",
+        "capability": "codegen.repository",
+        "depends_on": [],
+        "payload": brief,
+        "native_restrictions": {"cwd": str(disposable_repository)},
+    }],
+}
+```
+
 The provider may inspect, edit, and test only the disposable copy. The caller
 preserves every nonempty raw or recovered response, captures the binary-safe
 diff, verifies the recorded source head, and removes the copy. Provider
 formatting and optional diagnostics do not gate content recovery. The primary
-reviews and applies accepted changes, runs independent tests, and owns commits,
-PRs, merges, and deployment. Never infer a patch or cleanup from process exit.
+reviews and applies accepted changes, independently validates them, and owns
+commits, PRs, merges, and deployment. If the caller decides to stop an attempt,
+one caller owns cancellation and verifies the runtime's cleanup; retain partial
+content and record caller cancellation as such. Never infer a patch or cleanup
+from process exit. Never replay the consumed work unit or describe cancellation
+as a provider outage.
diff --git a/tests/fixtures/sdk-method-contracts/case_a.py b/tests/fixtures/sdk-method-contracts/case_a.py
new file mode 100644
index 00000000..eb054a98
--- /dev/null
+++ b/tests/fixtures/sdk-method-contracts/case_a.py
@@ -0,0 +1,8 @@
+"""A read caller for independent review against sdk.py."""
+
+
+def read_secrets(client):
+    return (
+        client.get("54fbb187-3626-4832-b581-2f6fc85cc518"),
+        client.list("2b96f0ed-8c6c-45bd-832c-b88fcc4eae07"),
+    )
diff --git a/tests/fixtures/sdk-method-contracts/case_b.py b/tests/fixtures/sdk-method-contracts/case_b.py
new file mode 100644
index 00000000..24b81cc0
--- /dev/null
+++ b/tests/fixtures/sdk-method-contracts/case_b.py
@@ -0,0 +1,10 @@
+"""A second read caller for independent review against sdk.py."""
+
+from uuid import UUID
+
+
+def read_secrets(client):
+    return (
+        client.get(UUID("54fbb187-3626-4832-b581-2f6fc85cc518")),
+        client.list(UUID("2b96f0ed-8c6c-45bd-832c-b88fcc4eae07")),
+    )
diff --git a/tests/fixtures/sdk-method-contracts/rubric.md b/tests/fixtures/sdk-method-contracts/rubric.md
new file mode 100644
index 00000000..d5eea04c
--- /dev/null
+++ b/tests/fixtures/sdk-method-contracts/rubric.md
@@ -0,0 +1,19 @@
+# External-method contract review case
+
+For a fresh reviewer evaluation, copy only `sdk.py`, `case_a.py`, and
+`case_b.py` into a disposable repository. Apply the candidate review skill's
+guidance and ask for a source-grounded review of both callers against this
+supplied SDK. Do not provide this rubric to the reviewer. Retain the complete
+native response and source identity; adjudicate it manually. No keyword or
+verdict classifier establishes a pass.
+
+The review should preserve case A's string reads. It should identify case B's
+UUID read arguments as a real serialization error, grounded in `get` and
+`list` passing values unchanged into `_command` and `json.dumps`. `create`
+accepts UUID objects and explicitly converts their bytes; its different
+contract cannot establish the read methods' argument types. Assertions that
+require UUID objects for the reads would encode the wrong contract.
+
+`test_sdk_method_contract_fixture.py` proves these fixture behaviors with the
+real standard-library JSON serializer. It validates the example, not an LLM's
+review quality. A reviewer evaluation remains a separate observation.
diff --git a/tests/fixtures/sdk-method-contracts/sdk.py b/tests/fixtures/sdk-method-contracts/sdk.py
new file mode 100644
index 00000000..4255db1d
--- /dev/null
+++ b/tests/fixtures/sdk-method-contracts/sdk.py
@@ -0,0 +1,18 @@
+"""Synthetic SDK with deliberately different read and create contracts."""
+
+import json
+from uuid import UUID
+
+
+class Secrets:
+    def _command(self, operation: str, arguments: dict) -> str:
+        return json.dumps({"operation": operation, "arguments": arguments})
+
+    def get(self, identifier: str) -> str:
+        return self._command("get", {"id": identifier})
+
+    def list(self, organization_id: str) -> str:
+        return self._command("list", {"organizationId": organization_id})
+
+    def create(self, identifier: UUID) -> str:
+        return self._command("create", {"id": identifier.bytes.hex()})
diff --git a/tests/test_plugin_archive.py b/tests/test_plugin_archive.py
index acd55f2b..37a9b7ea 100644
--- a/tests/test_plugin_archive.py
+++ b/tests/test_plugin_archive.py
@@ -71,7 +71,7 @@ def test_imported_signed_manifest_is_accepted_by_archive_parser(self) -> None:
         versions = {
             item["provider_runtime_version"] for item in parsed["artifacts"]
         }
-        self.assertEqual(versions, {"5.0.9"})
+        self.assertEqual(versions, {"5.0.12"})
 
     def test_manifest_parser_rejects_duplicate_keys_and_runtime_oversize(self) -> None:
         archive = _load()
diff --git a/tests/test_project_estimation_bootstrap.py b/tests/test_project_estimation_bootstrap.py
index 269f5efa..b5d5a0f0 100644
--- a/tests/test_project_estimation_bootstrap.py
+++ b/tests/test_project_estimation_bootstrap.py
@@ -158,9 +158,9 @@ def test_any_exact_producer_byte_mutation_is_rejected(self) -> None:
             self.assertFalse(ok)
             self.assertTrue(any("canonical" in line or "inventory" in line for line in lines), lines)
 
-    def test_current_maintenance_is_admitted_for_version_7_0_8(self) -> None:
+    def test_current_maintenance_is_admitted_for_version_7_0_9(self) -> None:
         ok, lines = self.verifier.verify_maintenance(
-            ROOT, expected_version="7.0.8"
+            ROOT, expected_version="7.0.9"
         )
         self.assertTrue(ok, lines)
 
diff --git a/tests/test_project_estimation_skill.py b/tests/test_project_estimation_skill.py
index c6101b28..e1aaab1d 100644
--- a/tests/test_project_estimation_skill.py
+++ b/tests/test_project_estimation_skill.py
@@ -131,7 +131,7 @@ def test_package_planners_preserve_typed_unavailable_cost(self) -> None:
                 self.assertIn("must not become zero or a workflow failure", normalized)
 
     def test_additive_version_is_consistent_across_canonical_distribution_surfaces(self) -> None:
-        expected = "7.0.8"
+        expected = "7.0.9"
         config = json.loads((ROOT / "scripts" / "skill-build-config.json").read_text(encoding="utf-8"))
         self.assertEqual(config["agent-collab"]["skill_version"], expected)
         for manifest in (
diff --git a/tests/test_protocol5_public_contract.py b/tests/test_protocol5_public_contract.py
index b21a5479..519f5e88 100644
--- a/tests/test_protocol5_public_contract.py
+++ b/tests/test_protocol5_public_contract.py
@@ -71,7 +71,7 @@ def synthetic_candidate_manifest() -> bytes:
     manifest["wire_contract"] = descriptor
     manifest["wire_contract_sha256"] = digest
     for artifact in manifest["artifacts"]:
-        artifact["provider_runtime_version"] = "5.0.9"
+        artifact["provider_runtime_version"] = "5.0.12"
         artifact["wire_contract_sha256"] = digest
     return json.dumps(
         manifest, sort_keys=True, separators=(",", ":"),
@@ -96,10 +96,10 @@ def test_manifest_protocol_and_source_client_are_protocol_five_generation(self)
         self.assertEqual(self.manifest["channel"], "production")
         self.assertEqual(self.client.PROTOCOL_VERSION, 5)
         self.assertEqual(self.client.CONTRACT_VERSION, 4)
-        self.assertEqual(self.client.PROVIDER_RUNTIME_VERSION, "5.0.9")
+        self.assertEqual(self.client.PROVIDER_RUNTIME_VERSION, "5.0.12")
 
     def test_wire_is_routing_only_and_descriptor_derived(self) -> None:
-        # The checked-in signed bundles are the 5.0.9/schema-12 generation.
+        # The checked-in signed bundles are the 5.0.12/schema-12 generation.
         # Keep the synthetic descriptor check as an independent client contract.
         descriptor, digest = synthetic_wire_descriptor()
         snapshot = self.client.validate_wire_descriptor(
@@ -134,11 +134,11 @@ def test_wire_is_routing_only_and_descriptor_derived(self) -> None:
         ):
             self.assertNotIn(retired, descriptor)
 
-    def test_dual_architecture_artifacts_are_exactly_runtime_5_0_9(self) -> None:
+    def test_dual_architecture_artifacts_are_exactly_runtime_5_0_12(self) -> None:
         artifacts = self.manifest["artifacts"]
         self.assertEqual({item["arch"] for item in artifacts}, {"arm64", "x86_64"})
         self.assertEqual(
-            {item["provider_runtime_version"] for item in artifacts}, {"5.0.9"}
+            {item["provider_runtime_version"] for item in artifacts}, {"5.0.12"}
         )
         self.assertEqual(
             self.client.PROVIDER_RUNTIME_VERSION,
@@ -201,14 +201,14 @@ def test_schema_eleven_descriptor_is_rejected_by_source_candidate_client(self) -
                 descriptor, expected_sha256=digest
             )
 
-    def test_distribution_metadata_is_version_7_0_8(self) -> None:
+    def test_distribution_metadata_is_version_7_0_9(self) -> None:
         for host in (".claude-plugin", ".codex-plugin"):
             value = json.loads((PLUGIN / host / "plugin.json").read_text())
-            self.assertEqual(value["version"], "7.0.8")
+            self.assertEqual(value["version"], "7.0.9")
         config = json.loads(
             (ROOT / "scripts" / "skill-build-config.json").read_text(encoding="utf-8")
         )
-        self.assertEqual(config["agent-collab"]["skill_version"], "7.0.8")
+        self.assertEqual(config["agent-collab"]["skill_version"], "7.0.9")
 
     def test_routed_skills_publish_provider_neutral_quality_and_effort(self) -> None:
         build = load_module("protocol5_build_skills", ROOT / "scripts" / "build_skills.py")
diff --git a/tests/test_public_distribution_contract.py b/tests/test_public_distribution_contract.py
index 87341871..402a33ef 100644
--- a/tests/test_public_distribution_contract.py
+++ b/tests/test_public_distribution_contract.py
@@ -20,7 +20,7 @@ def test_source_generated_metadata_is_consistently_version_7(self) -> None:
         versions.add(json.loads((ROOT / ".claude-plugin" / "marketplace.json").read_text(encoding="utf-8"))["plugins"][0]["version"])
         versions.add(json.loads((ROOT / ".claude-plugin" / "marketplace.json").read_text(encoding="utf-8"))["metadata"]["version"])
         versions.add(json.loads((ROOT / ".claude-plugin" / "marketplace.base.json").read_text(encoding="utf-8"))["metadata"]["version"])
-        self.assertEqual(versions, {"7.0.8"})
+        self.assertEqual(versions, {"7.0.9"})
 
     def test_current_release_documentation_matches_published_evidence(self) -> None:
         status = (
diff --git a/tests/test_routing_coordinator.py b/tests/test_routing_coordinator.py
index d779747f..8e6b0d73 100644
--- a/tests/test_routing_coordinator.py
+++ b/tests/test_routing_coordinator.py
@@ -202,6 +202,45 @@ def _wire(self):
         self.assertIsNotNone(wire)
         return wire
 
+    def test_worker_recipe_forwards_explicit_inactivity_lease_once(self) -> None:
+        source = (ROOT / "skill-specs" / "worker.md").read_text()
+        recipe = source.split("```python\n", 1)[1].split("\n```", 1)[0]
+        wire = self._wire()
+        client = self.coordinator._load_client()
+        with tempfile.TemporaryDirectory() as raw:
+            repository = self._repository(Path(raw), "worker copy")
+            namespace = {
+                "manifest": {"wire_contract_sha256": wire.sha256},
+                "request_id": "worker-lease-example",
+                "brief": "Make the bounded change; primary owns validation.",
+                "disposable_repository": repository,
+            }
+            exec(compile(recipe, "worker.md", "exec"), namespace)
+            request = namespace["request"]
+            calls = []
+
+            def invoke(*, envelope):
+                client._envelope_document(envelope, wire)
+                calls.append(envelope)
+                return Result("ok", [])
+
+            fake = types.SimpleNamespace(
+                invoke=invoke, runtime_contract_snapshot=lambda: (wire, "", ""),
+            )
+            stdin = types.SimpleNamespace(
+                isatty=lambda: False,
+                buffer=io.BytesIO(json.dumps(request).encode()),
+            )
+            with mock.patch.object(self.coordinator.sys, "stdin", stdin), \
+                    mock.patch.object(self.coordinator, "_load_client", return_value=fake), \
+                    mock.patch.object(self.coordinator, "_write"):
+                code = self.coordinator.main()
+        self.assertEqual(code, 0)
+        self.assertEqual(len(calls), 1)
+        self.assertEqual(calls[0]["deadline_ms"], 600000)
+        self.assertEqual(calls[0]["work_units"][0]["payload"], namespace["brief"])
+        self.assertEqual(calls[0]["work_units"][0]["capability"], "codegen.repository")
+
     @staticmethod
     def _repository(root: Path, name: str) -> Path:
         repository = root / name
diff --git a/tests/test_sdk_method_contract_fixture.py b/tests/test_sdk_method_contract_fixture.py
new file mode 100644
index 00000000..a8460410
--- /dev/null
+++ b/tests/test_sdk_method_contract_fixture.py
@@ -0,0 +1,61 @@
+"""Keep the independent-review example grounded in executable SDK behavior."""
+
+import importlib.util
+import json
+from pathlib import Path
+import unittest
+from uuid import UUID
+
+
+FIXTURE = Path(__file__).parent / "fixtures" / "sdk-method-contracts"
+
+
+def load_fixture(name):
+    spec = importlib.util.spec_from_file_location(
+        "sdk_method_contract_fixture_" + name, FIXTURE / (name + ".py")
+    )
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+class SdkMethodContractFixtureTests(unittest.TestCase):
+    def setUp(self):
+        self.client = load_fixture("sdk").Secrets()
+
+    def test_string_read_caller_serializes_actual_read_arguments(self):
+        first, second = load_fixture("case_a").read_secrets(self.client)
+        self.assertEqual(
+            json.loads(first),
+            {"operation": "get", "arguments": {
+                "id": "54fbb187-3626-4832-b581-2f6fc85cc518"
+            }},
+        )
+        self.assertEqual(
+            json.loads(second),
+            {"operation": "list", "arguments": {
+                "organizationId": "2b96f0ed-8c6c-45bd-832c-b88fcc4eae07"
+            }},
+        )
+
+    def test_uuid_read_caller_fails_in_the_real_json_serializer(self):
+        with self.assertRaises(TypeError):
+            load_fixture("case_b").read_secrets(self.client)
+        with self.assertRaises(TypeError):
+            self.client.list(UUID("2b96f0ed-8c6c-45bd-832c-b88fcc4eae07"))
+
+    def test_create_converts_uuid_in_its_own_method(self):
+        self.assertEqual(
+            json.loads(self.client.create(
+                UUID("54fbb187-3626-4832-b581-2f6fc85cc518")
+            )),
+            {"operation": "create", "arguments": {
+                "id": "54fbb18736264832b5812f6fc85cc518"
+            }},
+        )
+        with self.assertRaises(AttributeError):
+            self.client.create("54fbb187-3626-4832-b581-2f6fc85cc518")
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/tests/test_unified_skill_runtime_contract.py b/tests/test_unified_skill_runtime_contract.py
index cbe77984..d841ae33 100644
--- a/tests/test_unified_skill_runtime_contract.py
+++ b/tests/test_unified_skill_runtime_contract.py
@@ -22,12 +22,12 @@ def _assert_single_cardinality_claim(
     ) -> None:
         self.assertEqual([str(expected)], re.findall(pattern, section))
 
-    def test_generated_skills_and_host_manifests_are_version_7_0_8(self) -> None:
+    def test_generated_skills_and_host_manifests_are_version_7_0_9(self) -> None:
         for path in (PLUGIN / "skills").glob("*/SKILL.md"):
-            self.assertIn("\nversion: 7.0.8\n", path.read_text(encoding="utf-8"))
+            self.assertIn("\nversion: 7.0.9\n", path.read_text(encoding="utf-8"))
         for host in (".claude-plugin", ".codex-plugin"):
             manifest = json.loads((PLUGIN / host / "plugin.json").read_text(encoding="utf-8"))
-            self.assertEqual(manifest["version"], "7.0.8")
+            self.assertEqual(manifest["version"], "7.0.9")
 
     def test_readme_documents_routing_only_protocol_five(self) -> None:
         text = (PLUGIN / "README.md").read_text(encoding="utf-8")