[mzored]

Summary

Field sessions on 7.0.1 reported to an owner writing in Russian mostly in English, with hashes, check names, and UNVERIFIED labels, because the kernel's Done section asked for them. They left findings of their own work to session cards the owner had to start, and handed out one-off commands for a step the owner's own settings refused.

• Done: account for every part, branch, worktree, finding, and blocker, with hashes and checks, in a commit, PR, or issue the work may write and its audience may read, else in the report; tell the owner, in their language and product terms, what changed for users and where it runs.
• Custody: never leave parts or findings of the outcome to sessions the owner must start.
• Authority: a host or sandbox refusal becomes one plain request for a lasting permission.
• Offsets: three sentences the delegation, tracked-work, testing, and integration playbooks already carry, and the delegation References entry the dispatch rule links. Kernel 9,891 → 9,808 characters, 1,491 → 1,489 words.
• Contract, decisions, evidence count, corpus (owner-report-in-owner-language, plus a forbidden owner-session event on tracked-work-finding-reported-not-recorded), version files, and changelog follow.

The full field read, the items checked and left unchanged, and the two-round Codex review are in CHANGELOG.md.

Validation

Capability	Status
Deterministic package gate (scripts/check.py, git diff --check)	PASS locally
Codex and Claude schema validation	CI
Clean install on each host	UNVERIFIED (no layout or manifest-shape change)
Explicit invocation, implicit activation, continuity	UNVERIFIED
Behavioral suite	UNVERIFIED, see docs/evidence.md; the owner declined paid runs

🤖 Generated with Claude Code