- 01plantruth · scope · landing owner
- 02claim + dispatchtyped conflicts before work
- 03parallel workindependent paths and receipts
- 04reviewreviewer did not author the delivery
- 05correctionone bounded finding graph
- 06landingroot integrates reviewed bytes
- 07exact commit treeone final acceptance run
- 08build and restarthealth · receipts · release
workingowns an active next stepwaitingnames the outside moverreadycan accept work; obligations may remainclosed · outcomelifecycle outcome · not a live Session recordunknownstale or absent evidence
Unknown is not offline. Ready is a Session declaration that says it can accept new work; it does not prove that every obligation is complete or replace a broker-verified landing. Closed is a lifecycle outcome, not a current live Session record.
01 · RecoverThe app disappears. The work does not become anonymous.
Current: “Resume all sessions” becomes a sequence of exact Claude and Codex resumes, and every session continues its own assignment. Rebind restores Clawdfather’s role; the existing resume route restores the conversations.
02 · UntangleTwo fast sessions are slower when they touch the same truth.
The conflict becomes a typed wait, not a race. Disjoint lanes flow now; the blocked lane resumes only after the owner releases it.
03 · DispatchOne sentence becomes three independent lines of work.
The lines start independently and report independently. A slow relay audit cannot hide the app result or hold the launch-page result hostage.
04 · ProtectA green child result is not permission to land.
One check marks a delivered milestone. Two checks appear only after the broker verifies the target landing; the wider graph still belongs to its root.
05 · Catch upReturn to the machine-wide picture, not four stale tabs.
The summary keeps the states separate: completed, pending landing, waiting human, failed. Nothing is promoted to “done” by prose or by silence.
06 · Route aroundOne exhausted assistant is a branch failure, not a machine failure.
The blocked branch is explicit and recoverable. Codex takes the bounded build; observation and unrelated sessions continue without sharing its failure.
07 · IntegratePlan once. Split safely. Review independently. Deliver the exact tree.
Only a SAFE TO LAND review opens integration. Clawdfather lands the reviewed bytes, verifies the exact commit tree once, performs the authorized build and restart, checks live health and receipts, and closes only Sessions with no remaining obligation.