Feat/gateway mediated llm fulfillment

.runs/slice-29-shared-dispatch-contract/branch-map.json

@@ -0,0 +1,35 @@
+{
+  "authoritative_branch": "feat/gateway-mediated-llm-fulfillment",
+  "authoritative_head_at_P0": "4c61ab779752a9185c6b7558275d7fdb5880893c",
+  "accepted_tip_after_G1": "50a450a05f374e46c736f79f9b5c7fec5c0e54d9",
+  "accepted_tip_after_G2": "42636f8eb68fe2e817d973a4896f5c35cfc5b12b",
+  "accepted_tip_after_G3": "0d15fb2fe8902a9201c891eccd3d7a20325f9d72",
+  "lane_branches": {
+    "L0": "codex/feat-gateway-mediated-llm-fulfillment-s29-a1-a2-contract-foundation",
+    "L1": "codex/feat-gateway-mediated-llm-fulfillment-s29-a3-durable-attach-freeze",
+    "L2": "codex/feat-gateway-mediated-llm-fulfillment-s29-a4-human-caller-adoption",
+    "L3": "codex/feat-gateway-mediated-llm-fulfillment-s29-a5-repl-dispatch-adoption",
+    "L4": "codex/feat-gateway-mediated-llm-fulfillment-s29-a6-docs-truth-sync"
+  },
+  "lane_worktrees": {
+    "root": "/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract",
+    "L0": "/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract/a1-a2-contract-foundation",
+    "L1": "/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract/a3-durable-attach-freeze",
+    "L2": "/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract/a4-human-caller-adoption",
+    "L3": "/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract/a5-repl-dispatch-adoption",
+    "L4": "/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract/a6-docs-truth-sync"
+  },
+  "lane_base_shas": {
+    "L0": "4c61ab779752a9185c6b7558275d7fdb5880893c",
+    "L1": "50a450a05f374e46c736f79f9b5c7fec5c0e54d9",
+    "L2": "42636f8eb68fe2e817d973a4896f5c35cfc5b12b",
+    "L3": "42636f8eb68fe2e817d973a4896f5c35cfc5b12b",
+    "L4": "0d15fb2fe8902a9201c891eccd3d7a20325f9d72"
+  },
+  "replay_target_sha": "0d15fb2fe8902a9201c891eccd3d7a20325f9d72",
+  "notes": [
+    "ORCH_PLAN.md declares equivalent worktree names under a different absolute workstation root; this run maps them to the live workspace root in this environment.",
+    "accepted_tip_after_G2 is the authoritative post-L1 integration commit from which both L2 and L3 were created.",
+    "accepted_tip_after_G3 is the authoritative slice-29 implementation/docs/test tree that passed the locked validation wall; the follow-up closeout commit only updates parent-owned .runs artifacts."
+  ]
+}

.runs/slice-29-shared-dispatch-contract/contract-freeze.json

@@ -0,0 +1,55 @@
+{
+  "module_owner": "crates/shell/src/execution/agent_runtime/dispatch_contract.rs",
+  "frozen_vocabulary": {
+    "dispatch_request_envelope": "DispatchRequestEnvelope",
+    "dispatch_capability_override_set": "DispatchCapabilityOverrideSet",
+    "attach_launch_knobs": "AttachLaunchKnobs",
+    "resolved_launch_contract": "ResolvedLaunchContract",
+    "field_provenance": "FieldProvenance",
+    "dispatch_resolution_error": "DispatchResolutionError"
+  },
+  "baseline_kinds": [
+    "inventory_backed",
+    "persisted_attach_backed"
+  ],
+  "caller_kinds": [
+    "human_start",
+    "human_reattach",
+    "human_fork",
+    "human_detached_turn_attach",
+    "orchestrator_member_dispatch"
+  ],
+  "capability_families": [
+    "backend_identity",
+    "scope",
+    "cli_mode",
+    "capability_profile",
+    "policy_overlay"
+  ],
+  "attach_knob_vocabulary": [
+    "attach_mode",
+    "continuity_selector",
+    "resume_contract_required"
+  ],
+  "merge_precedence": [
+    "baseline_truth",
+    "explicit_supported_dispatch_overrides",
+    "effective_policy_narrowing",
+    "runtime_realizability_validation"
+  ],
+  "fail_closed_categories": [
+    "unknown_override_family",
+    "unsupported_override",
+    "baseline_broadening",
+    "invalid_policy_overlay",
+    "policy_denial",
+    "runtime_unrealizable",
+    "missing_required_continuity"
+  ],
+  "frozen_invariants": [
+    "One shared internal dispatch contract owner exists under crates/shell/src/execution/agent_runtime/.",
+    "Inventory-backed and persisted-attach-backed baseline domains remain explicit.",
+    "Policy remains narrowing-only and fail-closed.",
+    "Human callers and orchestrator-controlled dispatch must resolve through the same contract semantics."
+  ]
+}

.runs/slice-29-shared-dispatch-contract/durable-state-freeze.json

@@ -0,0 +1,27 @@
+{
+  "durable_owner": "HostAttachContract",
+  "owner_module": "crates/shell/src/execution/agent_runtime/orchestration_session.rs",
+  "required_persisted_fields": [
+    "backend identity derived from resolved contract",
+    "scope truth derived from resolved contract",
+    "cli mode truth derived from resolved contract",
+    "capability truth derived from resolved contract",
+    "attach continuity selector state",
+    "resume-contract continuity requirements"
+  ],
+  "continuity_successor_copy_rule": [
+    "Preserve resolved launch truth needed for successor attach.",
+    "Clear only continuity-specific state on successor copy.",
+    "Do not persist a second durable attach object.",
+    "Do not persist full provenance trees."
+  ],
+  "compatibility_constraints": [
+    "Persisted JSON changes must remain additive or migration-safe through OrchestrationSessionRecord::validate_persisted_invariants(...).",
+    "Detached attach planning must consume persisted attach truth instead of ambient participant state."
+  ],
+  "prohibitions": [
+    "No second durable attach object.",
+    "No caller-specific reconstruction of host launch truth.",
+    "No non-additive persisted-state break."
+  ]
+}

.runs/slice-29-shared-dispatch-contract/final-summary.md

@@ -0,0 +1,15 @@
+# Final Summary
+
+Accepted implementation/docs/test tip: `0d15fb2fe8902a9201c891eccd3d7a20325f9d72`
+
+- Landed one shared internal dispatch contract in `dispatch_contract.rs`, with explicit inventory-backed and persisted-attach-backed baseline domains.
+- Kept `HostAttachContract` as the only durable host-attach truth and generalized it to persist resolved launch semantics without inventing a second durable attach object.
+- Brought the human caller plane and orchestrator-controlled dispatch back onto the same contract semantics, including same-session parked-turn reattach/stop continuity.
+- Aligned the allowed docs and llm-last-mile truth surfaces to the merged runtime behavior.
+
+Validation:
+
+- The locked shell selectors passed, including `resolve_public_control_target`, `public_turn_prompt_requests_require_exact_session_and_backend_contract`, `new_session_starts_active_attached`, and `detached_postures_enforce_pending_inbox_truth`.
+- `cargo test -p shell --test agent_public_control_surface_v1 -- --nocapture` and `cargo test -p shell --test repl_world_first_routing_v1 -- --nocapture` passed on the accepted tree.
+- `cargo fmt --all -- --check`, `cargo clippy --workspace --all-targets -- -D warnings`, and `cargo test --workspace -- --nocapture` passed.
+- `npx gitnexus detect-changes --repo substrate --scope staged` reported `7 files`, `37 symbols`, `0 affected processes`, `risk level: low`.

.runs/slice-29-shared-dispatch-contract/gates/G0-run-freeze/PASSED

@@ -0,0 +1 @@
+passed

.runs/slice-29-shared-dispatch-contract/gates/G0-run-freeze/evidence.md

@@ -0,0 +1,16 @@
+# G0 Evidence
+
+`G0` passes because all frozen preconditions in `ORCH_PLAN.md` are satisfied:
+
+1. The authoritative branch is `feat/gateway-mediated-llm-fulfillment`.
+2. `PLAN.md` working-tree bytes were hashed and source-locked in `source-lock.json`.
+3. `contract-freeze.json` and `durable-state-freeze.json` were written by the parent.
+4. `branch-map.json`, `lane-ownership.json`, and `merge-order.json` were written by the parent.
+5. The slice-29 worktree root exists, but no slice-29 worker worktree exists yet.
+
+Supporting command evidence:
+
+- `git rev-parse HEAD` => `4c61ab779752a9185c6b7558275d7fdb5880893c`
+- `sha256sum PLAN.md` => `9389b48a1d20f93c8411a7670f11e25ed0929b0cddce7dc4deeb5c5adb5182cc`
+- `git status --short --branch -- PLAN.md ORCH_PLAN.md` => `## feat/gateway-mediated-llm-fulfillment...origin/feat/gateway-mediated-llm-fulfillment`
+- `git worktree list --porcelain` => only the authoritative checkout plus `/tmp/substrate-origin-main-check`; no slice-29 worker worktree exists at `/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract/`

.runs/slice-29-shared-dispatch-contract/gates/G0-run-freeze/gate.json

@@ -0,0 +1,6 @@
+{
+  "gate_id": "G0-run-freeze",
+  "status": "passed",
+  "opened_at": "2026-05-24T18:13:37Z",
+  "passed_at": "2026-05-24T18:13:37Z"
+}

.runs/slice-29-shared-dispatch-contract/gates/G1-contract-foundation/PASSED

@@ -0,0 +1 @@
+passed

.runs/slice-29-shared-dispatch-contract/gates/G1-contract-foundation/evidence.md

@@ -0,0 +1,34 @@
+# G1 Evidence
+
+`G1` passes because the integrated authoritative tree satisfies the contract-foundation acceptance criteria in `ORCH_PLAN.md`.
+
+1. `dispatch_contract.rs` exists and is exported from `agent_runtime/mod.rs`.
+   - [`crates/shell/src/execution/agent_runtime/dispatch_contract.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/dispatch_contract.rs:1)
+   - [`crates/shell/src/execution/agent_runtime/mod.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/mod.rs:2)
+2. Inventory-backed and persisted-attach-backed baseline domains are explicit, with per-field provenance tracked inside the shared contract owner.
+   - Inventory projection/origin helpers: [`agent_inventory.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_inventory.rs:105), [`agent_inventory.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_inventory.rs:196)
+   - Inventory and persisted-attach resolvers: [`dispatch_contract.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/dispatch_contract.rs:210), [`dispatch_contract.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/dispatch_contract.rs:313), [`dispatch_contract.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/dispatch_contract.rs:389), [`dispatch_contract.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/dispatch_contract.rs:470)
+3. Policy remains narrowing-only and fail-closed, and the contract produces runtime materialization inputs instead of a second merge owner.
+   - Override/policy rejection layers and provenance: [`dispatch_contract.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/dispatch_contract.rs:156), [`dispatch_contract.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/dispatch_contract.rs:442)
+   - Runtime materialization from `ResolvedLaunchContract`: [`validator.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/validator.rs:124), [`validator.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/validator.rs:173), [`validator.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/validator.rs:231)
+4. `control.rs` consumes downstream descriptor/state-store results rather than owning top-level merge semantics, so no `L0` control edit was required.
+   - Public prompt dispatch resolves through exact participant/session targeting only: [`control.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/control.rs:1601), [`control.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/control.rs:2272)
+   - The focused contract-semantic control test passes: [`control.rs`](/home/azureuser/__Active_Code/atomize-hq/substrate/crates/shell/src/execution/agent_runtime/control.rs:2733)
+5. The accepted authoritative diff stayed inside the authorized `L0` hotspot set.
+   - `git diff --name-only HEAD^ HEAD` => `agent_inventory.rs`, `dispatch_contract.rs`, `mod.rs`, `validator.rs`
+   - No durable-state, public CLI, REPL, docs, or `.runs/**` worker edits were merged from the lane.
+6. Focused authoritative validation passed.
+   - `cargo fmt --all -- --check`
+   - `cargo test -p shell dispatch_contract -- --nocapture`
+   - `cargo test -p shell validate_member_selection_returns_descriptor_for_unique_world_member -- --nocapture`
+   - `cargo test -p shell validate_exact_backend_selection_bypasses_world_ambiguity_when_backend_matches_exactly -- --nocapture`
+   - `cargo test -p shell public_turn_prompt_requests_require_exact_session_and_backend_contract -- --nocapture`
+7. The accepted authoritative tip is recorded and `L1` branches from it exactly.
+   - `accepted_tip_after_G1 = 50a450a05f374e46c736f79f9b5c7fec5c0e54d9`
+   - `L1` worktree was created from that SHA at `/home/azureuser/__Active_Code/atomize-hq/.worktrees/substrate-s29-shared-dispatch-contract/a3-durable-attach-freeze`
+
+Ancillary evidence:
+
+- A broader `cargo test -p shell validate_ -- --nocapture` attempt earlier hit unrelated linker bus errors from integration targets matched by the broad filter; the focused selectors above are the authoritative `G1` evidence.
+- An authoritative `cargo clippy -p shell --lib --tests -- -D warnings` attempt was blocked by disk exhaustion before cleanup. This is an environment incident, not a code regression, and is recorded in the task artifacts.
+- `npx gitnexus detect-changes --repo substrate --scope compare --base-ref HEAD^` now returns `Changes: 6 files, 16 symbols`, `Affected processes: 0`, `Risk level: low`, but the stale index still misclassifies some symbols and includes unrelated `AGENTS.md`/`CLAUDE.md` drift.

.runs/slice-29-shared-dispatch-contract/gates/G1-contract-foundation/gate.json

@@ -0,0 +1,6 @@
+{
+  "gate_id": "G1-contract-foundation",
+  "status": "passed",
+  "opened_at": "2026-05-24T18:13:37Z",
+  "passed_at": "2026-05-24T18:35:32Z"
+}

.runs/slice-29-shared-dispatch-contract/gates/G2-durable-attach/PASSED

@@ -0,0 +1 @@
+PASSED