Instructions to use veriloop-lab/veriloop-coder-e1 with libraries, inference providers, notebooks, and local apps. Follow these links to get started.

Libraries

How to use veriloop-lab/veriloop-coder-e1 with Transformers:

# Use a pipeline as a high-level helper
from transformers import pipeline

pipe = pipeline("text-generation", model="veriloop-lab/veriloop-coder-e1")
messages = [
    {
        "role": "user",
        "content": [
            {"type": "image", "url": "https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/p-blog/candy.JPG"},
            {"type": "text", "text": "What animal is on the candy?"}
        ]
    },
]
pipe(text=messages)

# Load model directly
from transformers import AutoProcessor, AutoModelForImageTextToText

processor = AutoProcessor.from_pretrained("veriloop-lab/veriloop-coder-e1")
model = AutoModelForImageTextToText.from_pretrained("veriloop-lab/veriloop-coder-e1")
messages = [
    {
        "role": "user",
        "content": [
            {"type": "image", "url": "https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/p-blog/candy.JPG"},
            {"type": "text", "text": "What animal is on the candy?"}
        ]
    },
]
inputs = processor.apply_chat_template(
	messages,
	add_generation_prompt=True,
	tokenize=True,
	return_dict=True,
	return_tensors="pt",
).to(model.device)

outputs = model.generate(**inputs, max_new_tokens=40)
print(processor.decode(outputs[0][inputs["input_ids"].shape[-1]:]))

PEFT
How to use veriloop-lab/veriloop-coder-e1 with PEFT:
```
Task type is invalid.
```
Notebooks
Google Colab
Kaggle
Local Apps

vLLM

How to use veriloop-lab/veriloop-coder-e1 with vLLM:

Install from pip and serve model

# Install vLLM from pip:
pip install vllm
# Start the vLLM server:
vllm serve "veriloop-lab/veriloop-coder-e1"
# Call the server using curl (OpenAI-compatible API):
curl -X POST "http://localhost:8000/v1/chat/completions" \
	-H "Content-Type: application/json" \
	--data '{
		"model": "veriloop-lab/veriloop-coder-e1",
		"messages": [
			{
				"role": "user",
				"content": "What is the capital of France?"
			}
		]
	}'

Use Docker

docker model run hf.co/veriloop-lab/veriloop-coder-e1

SGLang

How to use veriloop-lab/veriloop-coder-e1 with SGLang:

Install from pip and serve model

# Install SGLang from pip:
pip install sglang
# Start the SGLang server:
python3 -m sglang.launch_server \
    --model-path "veriloop-lab/veriloop-coder-e1" \
    --host 0.0.0.0 \
    --port 30000
# Call the server using curl (OpenAI-compatible API):
curl -X POST "http://localhost:30000/v1/chat/completions" \
	-H "Content-Type: application/json" \
	--data '{
		"model": "veriloop-lab/veriloop-coder-e1",
		"messages": [
			{
				"role": "user",
				"content": "What is the capital of France?"
			}
		]
	}'

Use Docker images

docker run --gpus all \
    --shm-size 32g \
    -p 30000:30000 \
    -v ~/.cache/huggingface:/root/.cache/huggingface \
    --env "HF_TOKEN=<secret>" \
    --ipc=host \
    lmsysorg/sglang:latest \
    python3 -m sglang.launch_server \
        --model-path "veriloop-lab/veriloop-coder-e1" \
        --host 0.0.0.0 \
        --port 30000
# Call the server using curl (OpenAI-compatible API):
curl -X POST "http://localhost:30000/v1/chat/completions" \
	-H "Content-Type: application/json" \
	--data '{
		"model": "veriloop-lab/veriloop-coder-e1",
		"messages": [
			{
				"role": "user",
				"content": "What is the capital of France?"
			}
		]
	}'

Docker Model Runner
How to use veriloop-lab/veriloop-coder-e1 with Docker Model Runner:
```
docker model run hf.co/veriloop-lab/veriloop-coder-e1
```

veriloop-coder-e1

File size: 133,985 Bytes

8ad54e3

{"mode": "argument_shaping", "tool_name": "browser_search", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=arguments\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"search query\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"query\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"integer\",\n      \"default_value\": 5,\n      \"description\": \"maximum hits\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"top_k\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 1,\n    \"sandbox_cost_estimate\": 0,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 2500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"network\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": false,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Search tool under runtime/network/validator discipline.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"retrieved evidence bundle\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"results\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"search execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"network\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"open_web\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Search public web sources and return evidence candidates.\",\n  \"tool_name\": \"browser_search\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nNormalize the user intent into the strict argument schema expected by browser_search.\n[/USER_QUERY]", "labels": {"tool_name": "browser_search", "mode_name": "argument_shaping", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 0, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 1, 0, 0, 1, 0, 0, 0, 0]}, "metadata": {"tool_name": "browser_search", "mode": "argument_shaping", "focus": "arguments", "split": "eval", "variant_rank": 0}}
{"mode": "harness_envelope", "tool_name": "browser_search", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=harness_envelope\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"search query\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"query\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"integer\",\n      \"default_value\": 5,\n      \"description\": \"maximum hits\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"top_k\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 1,\n    \"sandbox_cost_estimate\": 0,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 2500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"network\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": false,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Search tool under runtime/network/validator discipline.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"retrieved evidence bundle\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"results\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"search execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"network\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"open_web\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Search public web sources and return evidence candidates.\",\n  \"tool_name\": \"browser_search\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nWithin the full harness envelope, determine the compliant behavior of browser_search under control-plane priority.\n[/USER_QUERY]", "labels": {"tool_name": "browser_search", "mode_name": "harness_envelope", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 0, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 1, 0, 0, 1, 0, 0, 0, 0]}, "metadata": {"tool_name": "browser_search", "mode": "harness_envelope", "focus": "harness_envelope", "split": "eval", "variant_rank": 0}}
{"mode": "tool_trigger", "tool_name": "browser_search", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=trigger\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"search query\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"query\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"integer\",\n      \"default_value\": 5,\n      \"description\": \"maximum hits\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"top_k\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 1,\n    \"sandbox_cost_estimate\": 0,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 2500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"network\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": false,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Search tool under runtime/network/validator discipline.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"retrieved evidence bundle\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"results\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"search execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"network\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"open_web\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Search public web sources and return evidence candidates.\",\n  \"tool_name\": \"browser_search\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nUnder the same harness rules, judge if browser_search is the next valid tool call rather than free-form text.\n[/USER_QUERY]", "labels": {"tool_name": "browser_search", "mode_name": "tool_trigger", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 0, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 1, 0, 0, 1, 0, 0, 0, 0]}, "metadata": {"tool_name": "browser_search", "mode": "tool_trigger", "focus": "trigger", "split": "eval", "variant_rank": 0}}
{"mode": "argument_shaping", "tool_name": "browser_search", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=arguments\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"search query\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"query\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"integer\",\n      \"default_value\": 5,\n      \"description\": \"maximum hits\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"top_k\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 1,\n    \"sandbox_cost_estimate\": 0,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 2500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"network\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": false,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Search tool under runtime/network/validator discipline.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"retrieved evidence bundle\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"results\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"search execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"network\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"open_web\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Search public web sources and return evidence candidates.\",\n  \"tool_name\": \"browser_search\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nProduce arguments that fit browser_search and would fail if interpreted as repo_reverse_engineer.\n[/USER_QUERY]", "labels": {"tool_name": "browser_search", "mode_name": "argument_shaping", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 0, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 1, 0, 0, 1, 0, 0, 0, 0]}, "metadata": {"tool_name": "browser_search", "mode": "argument_shaping", "focus": "arguments", "split": "eval", "variant_rank": 1}}
{"mode": "precondition_gating", "tool_name": "browser_search", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=precondition_gating\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"search query\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"query\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"integer\",\n      \"default_value\": 5,\n      \"description\": \"maximum hits\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"top_k\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 1,\n    \"sandbox_cost_estimate\": 0,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 2500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"network\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": false,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Search tool under runtime/network/validator discipline.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"retrieved evidence bundle\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"results\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"search execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"network\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"open_web\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Search public web sources and return evidence candidates.\",\n  \"tool_name\": \"browser_search\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nDetect that browser_search should not fire because the required runtime preconditions are still unsatisfied.\n[/USER_QUERY]", "labels": {"tool_name": "browser_search", "mode_name": "precondition_gating", "trigger": 0, "schema_ok": 0, "precondition_ok": 0, "validator_required": 1, "worktree_required": 0, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 1, 0, 0, 1, 0, 0, 0, 0]}, "metadata": {"tool_name": "browser_search", "mode": "precondition_gating", "focus": "precondition_gating", "split": "eval", "variant_rank": 0}}
{"mode": "tool_trigger", "tool_name": "apply_patch_bundle", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=trigger\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"patch artifact ref\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"artifact_ref\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"boolean\",\n      \"default_value\": false,\n      \"description\": \"dry run flag\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"dry_run\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 4000,\n    \"token_cost_estimate\": 64,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"patch\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": false,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": true,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": true,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"write\",\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": true,\n    \"supports_resume\": true\n  },\n  \"description\": \"Mutating patch tool under worktree / snapshot / validator discipline.\",\n  \"invocation_mode\": \"mutating\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\",\n      \"sandbox_rollback_bridge\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"workspace diff\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"patch\",\n      \"name\": \"workspace_diff\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"patch receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"rolled_back\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"write\",\n      \"worktree\",\n      \"patch\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": true,\n    \"requires_clean_worktree\": true,\n    \"requires_confirmation\": true,\n    \"requires_evidence_before_trigger\": true,\n    \"risk_band\": \"high\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"partial\",\n    \"supports_rollback\": true\n  },\n  \"summary\": \"Apply a validated patch bundle to the workspace.\",\n  \"tool_name\": \"apply_patch_bundle\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nUnder the same harness rules, judge if apply_patch_bundle is the next valid tool call rather than free-form text.\n[/USER_QUERY]", "labels": {"tool_name": "apply_patch_bundle", "mode_name": "tool_trigger", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 1, "confirmation_required": 1, "session_required": 1, "permission_bits": [0, 0, 0, 0, 1, 0, 1, 0, 0, 1, 1]}, "metadata": {"tool_name": "apply_patch_bundle", "mode": "tool_trigger", "focus": "trigger", "split": "eval", "variant_rank": 0}}
{"mode": "receipt_and_validation", "tool_name": "apply_patch_bundle", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=receipt_validation\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"patch artifact ref\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"artifact_ref\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"boolean\",\n      \"default_value\": false,\n      \"description\": \"dry run flag\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"dry_run\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 4000,\n    \"token_cost_estimate\": 64,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"patch\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": false,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": true,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": true,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"write\",\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": true,\n    \"supports_resume\": true\n  },\n  \"description\": \"Mutating patch tool under worktree / snapshot / validator discipline.\",\n  \"invocation_mode\": \"mutating\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\",\n      \"sandbox_rollback_bridge\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"workspace diff\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"patch\",\n      \"name\": \"workspace_diff\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"patch receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"rolled_back\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"write\",\n      \"worktree\",\n      \"patch\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": true,\n    \"requires_clean_worktree\": true,\n    \"requires_confirmation\": true,\n    \"requires_evidence_before_trigger\": true,\n    \"risk_band\": \"high\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"partial\",\n    \"supports_rollback\": true\n  },\n  \"summary\": \"Apply a validated patch bundle to the workspace.\",\n  \"tool_name\": \"apply_patch_bundle\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nEmit the bounded receipt bundle that proves apply_patch_bundle complied with validator and permission policy.\n[/USER_QUERY]", "labels": {"tool_name": "apply_patch_bundle", "mode_name": "receipt_and_validation", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 1, "confirmation_required": 1, "session_required": 1, "permission_bits": [0, 0, 0, 0, 1, 0, 1, 0, 0, 1, 1]}, "metadata": {"tool_name": "apply_patch_bundle", "mode": "receipt_and_validation", "focus": "receipt_validation", "split": "eval", "variant_rank": 0}}
{"mode": "tool_trigger", "tool_name": "apply_patch_bundle", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=trigger\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"patch artifact ref\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"artifact_ref\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"boolean\",\n      \"default_value\": false,\n      \"description\": \"dry run flag\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"dry_run\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 4000,\n    \"token_cost_estimate\": 64,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"patch\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": false,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": true,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": true,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"write\",\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": true,\n    \"supports_resume\": true\n  },\n  \"description\": \"Mutating patch tool under worktree / snapshot / validator discipline.\",\n  \"invocation_mode\": \"mutating\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\",\n      \"sandbox_rollback_bridge\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"workspace diff\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"patch\",\n      \"name\": \"workspace_diff\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"patch receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"rolled_back\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"write\",\n      \"worktree\",\n      \"patch\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": true,\n    \"requires_clean_worktree\": true,\n    \"requires_confirmation\": true,\n    \"requires_evidence_before_trigger\": true,\n    \"risk_band\": \"high\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"partial\",\n    \"supports_rollback\": true\n  },\n  \"summary\": \"Apply a validated patch bundle to the workspace.\",\n  \"tool_name\": \"apply_patch_bundle\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nReject run_ci_validation and prefer apply_patch_bundle only when the contract and capability truly align with this request.\n[/USER_QUERY]", "labels": {"tool_name": "apply_patch_bundle", "mode_name": "tool_trigger", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 1, "confirmation_required": 1, "session_required": 1, "permission_bits": [0, 0, 0, 0, 1, 0, 1, 0, 0, 1, 1]}, "metadata": {"tool_name": "apply_patch_bundle", "mode": "tool_trigger", "focus": "trigger", "split": "eval", "variant_rank": 1}}
{"mode": "argument_shaping", "tool_name": "apply_patch_bundle", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=arguments\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"patch artifact ref\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"artifact_ref\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"boolean\",\n      \"default_value\": false,\n      \"description\": \"dry run flag\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"dry_run\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 4000,\n    \"token_cost_estimate\": 64,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"patch\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": false,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": true,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": true,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"write\",\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": true,\n    \"supports_resume\": true\n  },\n  \"description\": \"Mutating patch tool under worktree / snapshot / validator discipline.\",\n  \"invocation_mode\": \"mutating\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\",\n      \"sandbox_rollback_bridge\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"workspace diff\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"patch\",\n      \"name\": \"workspace_diff\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"patch receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"rolled_back\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"write\",\n      \"worktree\",\n      \"patch\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": true,\n    \"requires_clean_worktree\": true,\n    \"requires_confirmation\": true,\n    \"requires_evidence_before_trigger\": true,\n    \"risk_band\": \"high\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"partial\",\n    \"supports_rollback\": true\n  },\n  \"summary\": \"Apply a validated patch bundle to the workspace.\",\n  \"tool_name\": \"apply_patch_bundle\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nNormalize the user intent into the strict argument schema expected by apply_patch_bundle.\n[/USER_QUERY]", "labels": {"tool_name": "apply_patch_bundle", "mode_name": "argument_shaping", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 1, "confirmation_required": 1, "session_required": 1, "permission_bits": [0, 0, 0, 0, 1, 0, 1, 0, 0, 1, 1]}, "metadata": {"tool_name": "apply_patch_bundle", "mode": "argument_shaping", "focus": "arguments", "split": "eval", "variant_rank": 0}}
{"mode": "precondition_gating", "tool_name": "apply_patch_bundle", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=precondition_gating\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"patch artifact ref\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"artifact_ref\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"boolean\",\n      \"default_value\": false,\n      \"description\": \"dry run flag\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"dry_run\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 4000,\n    \"token_cost_estimate\": 64,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"patch\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": false,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": true,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": true,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"write\",\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": true,\n    \"supports_resume\": true\n  },\n  \"description\": \"Mutating patch tool under worktree / snapshot / validator discipline.\",\n  \"invocation_mode\": \"mutating\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\",\n      \"sandbox_rollback_bridge\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"workspace diff\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"patch\",\n      \"name\": \"workspace_diff\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"patch receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": true,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"rolled_back\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"write\",\n      \"worktree\",\n      \"patch\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": true,\n    \"requires_clean_worktree\": true,\n    \"requires_confirmation\": true,\n    \"requires_evidence_before_trigger\": true,\n    \"risk_band\": \"high\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"partial\",\n    \"supports_rollback\": true\n  },\n  \"summary\": \"Apply a validated patch bundle to the workspace.\",\n  \"tool_name\": \"apply_patch_bundle\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nDetect that apply_patch_bundle should not fire because the required runtime preconditions are still unsatisfied.\n[/USER_QUERY]", "labels": {"tool_name": "apply_patch_bundle", "mode_name": "precondition_gating", "trigger": 0, "schema_ok": 0, "precondition_ok": 0, "validator_required": 1, "worktree_required": 1, "rollback_supported": 1, "confirmation_required": 1, "session_required": 1, "permission_bits": [0, 0, 0, 0, 1, 0, 1, 0, 0, 1, 1]}, "metadata": {"tool_name": "apply_patch_bundle", "mode": "precondition_gating", "focus": "precondition_gating", "split": "eval", "variant_rank": 0}}
{"mode": "precondition_gating", "tool_name": "run_ci_validation", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=precondition_gating\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": \"pytest -q\",\n      \"description\": \"test selector\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"test_selector\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 8000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Read-only validation tool under workspace / session discipline.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"execution_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"validate\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"worktree\",\n      \"validate\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded CI/test validation and emit validator-compatible receipts.\",\n  \"tool_name\": \"run_ci_validation\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nDetect that run_ci_validation should not fire because the required runtime preconditions are still unsatisfied.\n[/USER_QUERY]", "labels": {"tool_name": "run_ci_validation", "mode_name": "precondition_gating", "trigger": 0, "schema_ok": 0, "precondition_ok": 0, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "run_ci_validation", "mode": "precondition_gating", "focus": "precondition_gating", "split": "eval", "variant_rank": 0}}
{"mode": "worktree_permission", "tool_name": "run_ci_validation", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=worktree_permission\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": \"pytest -q\",\n      \"description\": \"test selector\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"test_selector\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 8000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Read-only validation tool under workspace / session discipline.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"execution_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"validate\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"worktree\",\n      \"validate\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded CI/test validation and emit validator-compatible receipts.\",\n  \"tool_name\": \"run_ci_validation\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nJudge run_ci_validation under strict worktree and permission discipline, including when it should defer instead of acting.\n[/USER_QUERY]", "labels": {"tool_name": "run_ci_validation", "mode_name": "worktree_permission", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "run_ci_validation", "mode": "worktree_permission", "focus": "worktree_permission", "split": "eval", "variant_rank": 0}}
{"mode": "tool_trigger", "tool_name": "run_ci_validation", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=trigger\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": \"pytest -q\",\n      \"description\": \"test selector\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"test_selector\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 8000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Read-only validation tool under workspace / session discipline.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"execution_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"validate\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"worktree\",\n      \"validate\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded CI/test validation and emit validator-compatible receipts.\",\n  \"tool_name\": \"run_ci_validation\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nUnder the same harness rules, judge if run_ci_validation is the next valid tool call rather than free-form text.\n[/USER_QUERY]", "labels": {"tool_name": "run_ci_validation", "mode_name": "tool_trigger", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "run_ci_validation", "mode": "tool_trigger", "focus": "trigger", "split": "eval", "variant_rank": 0}}
{"mode": "argument_shaping", "tool_name": "run_ci_validation", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=arguments\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": \"pytest -q\",\n      \"description\": \"test selector\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"test_selector\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 8000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Read-only validation tool under workspace / session discipline.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"execution_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"validate\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"worktree\",\n      \"validate\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded CI/test validation and emit validator-compatible receipts.\",\n  \"tool_name\": \"run_ci_validation\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nNormalize the user intent into the strict argument schema expected by run_ci_validation.\n[/USER_QUERY]", "labels": {"tool_name": "run_ci_validation", "mode_name": "argument_shaping", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "run_ci_validation", "mode": "argument_shaping", "focus": "arguments", "split": "eval", "variant_rank": 0}}
{"mode": "precondition_gating", "tool_name": "run_ci_validation", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=precondition_gating\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": \"pytest -q\",\n      \"description\": \"test selector\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"test_selector\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 8000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Read-only validation tool under workspace / session discipline.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"execution receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"execution_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"validate\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"worktree\",\n      \"validate\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded CI/test validation and emit validator-compatible receipts.\",\n  \"tool_name\": \"run_ci_validation\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nEven if apply_patch_bundle looks tempting, keep run_ci_validation gated until the permission and worktree envelope is valid.\n[/USER_QUERY]", "labels": {"tool_name": "run_ci_validation", "mode_name": "precondition_gating", "trigger": 0, "schema_ok": 0, "precondition_ok": 0, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "run_ci_validation", "mode": "precondition_gating", "focus": "precondition_gating", "split": "eval", "variant_rank": 1}}
{"mode": "self_check_loop", "tool_name": "self_check_repair_loop", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=self_check_loop\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to validate\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"entry_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 6000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Self-check loop tool for code-after-generation verification and bounded repair routing.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"self_check_loop\": true,\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"bounded failure explanation\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"text\",\n      \"name\": \"failure_report\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"validate\",\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded self-check, diagnose the failed constraint, and prepare the next repair step.\",\n  \"tool_name\": \"self_check_repair_loop\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nAfter code generation, run the strict one-cycle self-check path and only escalate to the next bounded repair step if validation fails.\n[/USER_QUERY]", "labels": {"tool_name": "self_check_repair_loop", "mode_name": "self_check_loop", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "self_check_repair_loop", "mode": "self_check_loop", "focus": "self_check_loop", "split": "eval", "variant_rank": 0}}
{"mode": "tool_trigger", "tool_name": "self_check_repair_loop", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=trigger\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to validate\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"entry_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 6000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Self-check loop tool for code-after-generation verification and bounded repair routing.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"self_check_loop\": true,\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"bounded failure explanation\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"text\",\n      \"name\": \"failure_report\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"validate\",\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded self-check, diagnose the failed constraint, and prepare the next repair step.\",\n  \"tool_name\": \"self_check_repair_loop\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nUnder the same harness rules, judge if self_check_repair_loop is the next valid tool call rather than free-form text.\n[/USER_QUERY]", "labels": {"tool_name": "self_check_repair_loop", "mode_name": "tool_trigger", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "self_check_repair_loop", "mode": "tool_trigger", "focus": "trigger", "split": "eval", "variant_rank": 0}}
{"mode": "argument_shaping", "tool_name": "self_check_repair_loop", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=arguments\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to validate\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"entry_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 6000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Self-check loop tool for code-after-generation verification and bounded repair routing.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"self_check_loop\": true,\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"bounded failure explanation\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"text\",\n      \"name\": \"failure_report\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"validate\",\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded self-check, diagnose the failed constraint, and prepare the next repair step.\",\n  \"tool_name\": \"self_check_repair_loop\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nNormalize the user intent into the strict argument schema expected by self_check_repair_loop.\n[/USER_QUERY]", "labels": {"tool_name": "self_check_repair_loop", "mode_name": "argument_shaping", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "self_check_repair_loop", "mode": "argument_shaping", "focus": "arguments", "split": "eval", "variant_rank": 0}}
{"mode": "precondition_gating", "tool_name": "self_check_repair_loop", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=precondition_gating\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to validate\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"entry_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 6000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Self-check loop tool for code-after-generation verification and bounded repair routing.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"self_check_loop\": true,\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"bounded failure explanation\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"text\",\n      \"name\": \"failure_report\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"validate\",\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded self-check, diagnose the failed constraint, and prepare the next repair step.\",\n  \"tool_name\": \"self_check_repair_loop\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nDetect that self_check_repair_loop should not fire because the required runtime preconditions are still unsatisfied.\n[/USER_QUERY]", "labels": {"tool_name": "self_check_repair_loop", "mode_name": "precondition_gating", "trigger": 0, "schema_ok": 0, "precondition_ok": 0, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "self_check_repair_loop", "mode": "precondition_gating", "focus": "precondition_gating", "split": "eval", "variant_rank": 0}}
{"mode": "receipt_and_validation", "tool_name": "self_check_repair_loop", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=receipt_validation\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to validate\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"entry_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 6000,\n    \"token_cost_estimate\": 96,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"validator\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": false,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": true,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"execute\",\n      \"validate\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Self-check loop tool for code-after-generation verification and bounded repair routing.\",\n  \"invocation_mode\": \"executing\",\n  \"metadata\": {\n    \"self_check_loop\": true,\n    \"validator_names\": [\n      \"sandbox_result_validator\"\n    ]\n  },\n  \"outputs\": [\n    {\n      \"description\": \"validator receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"validation_receipt\",\n      \"name\": \"validator_receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    },\n    {\n      \"description\": \"bounded failure explanation\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"text\",\n      \"name\": \"failure_report\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"repair\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"execute\",\n      \"validate\",\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"medium\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Run bounded self-check, diagnose the failed constraint, and prepare the next repair step.\",\n  \"tool_name\": \"self_check_repair_loop\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nEmit the bounded receipt bundle that proves self_check_repair_loop complied with validator and permission policy.\n[/USER_QUERY]", "labels": {"tool_name": "self_check_repair_loop", "mode_name": "receipt_and_validation", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 1, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 1, 0, 0, 0, 0, 1, 0, 1, 1, 0]}, "metadata": {"tool_name": "self_check_repair_loop", "mode": "receipt_and_validation", "focus": "receipt_validation", "split": "eval", "variant_rank": 0}}
{"mode": "reverse_engineering", "tool_name": "repo_reverse_engineer", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=reverse_engineering\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to inspect\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"focus_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 3500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": false,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Repository reverse-engineering tool for code understanding, dependency tracing, and intent recovery.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"reverse_engineering\": true\n  },\n  \"outputs\": [\n    {\n      \"description\": \"bounded repository map\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"repo_map\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"inspection receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"low\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Inspect repository structure, infer missing intent, and reconstruct bounded architecture facts.\",\n  \"tool_name\": \"repo_reverse_engineer\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nUse bounded repository inspection to reconstruct missing intent and architecture facts before any tool fantasy appears.\n[/USER_QUERY]", "labels": {"tool_name": "repo_reverse_engineer", "mode_name": "reverse_engineering", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 0, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 0, 0, 0, 1, 0, 0, 1, 0]}, "metadata": {"tool_name": "repo_reverse_engineer", "mode": "reverse_engineering", "focus": "reverse_engineering", "split": "eval", "variant_rank": 0}}
{"mode": "runtime_session", "tool_name": "repo_reverse_engineer", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=runtime_session\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to inspect\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"focus_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 3500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": false,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Repository reverse-engineering tool for code understanding, dependency tracing, and intent recovery.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"reverse_engineering\": true\n  },\n  \"outputs\": [\n    {\n      \"description\": \"bounded repository map\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"repo_map\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"inspection receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"low\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Inspect repository structure, infer missing intent, and reconstruct bounded architecture facts.\",\n  \"tool_name\": \"repo_reverse_engineer\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nIdentify the session continuity obligations that surround repo_reverse_engineer in a multi-step harness turn.\n[/USER_QUERY]", "labels": {"tool_name": "repo_reverse_engineer", "mode_name": "runtime_session", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 0, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 0, 0, 0, 1, 0, 0, 1, 0]}, "metadata": {"tool_name": "repo_reverse_engineer", "mode": "runtime_session", "focus": "runtime_session", "split": "eval", "variant_rank": 0}}
{"mode": "tool_trigger", "tool_name": "repo_reverse_engineer", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=trigger\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to inspect\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"focus_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 3500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": false,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Repository reverse-engineering tool for code understanding, dependency tracing, and intent recovery.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"reverse_engineering\": true\n  },\n  \"outputs\": [\n    {\n      \"description\": \"bounded repository map\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"repo_map\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"inspection receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"low\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Inspect repository structure, infer missing intent, and reconstruct bounded architecture facts.\",\n  \"tool_name\": \"repo_reverse_engineer\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nUnder the same harness rules, judge if repo_reverse_engineer is the next valid tool call rather than free-form text.\n[/USER_QUERY]", "labels": {"tool_name": "repo_reverse_engineer", "mode_name": "tool_trigger", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 0, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 0, 0, 0, 1, 0, 0, 1, 0]}, "metadata": {"tool_name": "repo_reverse_engineer", "mode": "tool_trigger", "focus": "trigger", "split": "eval", "variant_rank": 0}}
{"mode": "argument_shaping", "tool_name": "repo_reverse_engineer", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=arguments\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to inspect\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"focus_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 3500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": false,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Repository reverse-engineering tool for code understanding, dependency tracing, and intent recovery.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"reverse_engineering\": true\n  },\n  \"outputs\": [\n    {\n      \"description\": \"bounded repository map\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"repo_map\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"inspection receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"low\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Inspect repository structure, infer missing intent, and reconstruct bounded architecture facts.\",\n  \"tool_name\": \"repo_reverse_engineer\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nNormalize the user intent into the strict argument schema expected by repo_reverse_engineer.\n[/USER_QUERY]", "labels": {"tool_name": "repo_reverse_engineer", "mode_name": "argument_shaping", "trigger": 1, "schema_ok": 1, "precondition_ok": 1, "validator_required": 0, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 0, 0, 0, 1, 0, 0, 1, 0]}, "metadata": {"tool_name": "repo_reverse_engineer", "mode": "argument_shaping", "focus": "arguments", "split": "eval", "variant_rank": 0}}
{"mode": "precondition_gating", "tool_name": "repo_reverse_engineer", "user_query": "[HARNESS_ENVELOPE]\nrole=generator\nruntime_protocol=true\ntyped_tool_contracts=true\nvalidator_alignment=true\nsession_continuity=true\npermission_alignment=true\nworktree_discipline=true\nrepair_after_self_check=true\nreverse_engineering_ready=true\nrule=Do not emit free-form tool fantasies. Follow the typed tool contract exactly.\nrule=If preconditions are not satisfied, defer, repair, or ask for the next bounded step.\nrule=Validator receipts and runtime permissions outrank narration.\nrule=If code is produced, the harness may still call a bounded self-check loop before final submit.\nrule=When repository intent is unclear, reverse-engineering and repository inspection are valid bounded actions.\ncontract_focus=precondition_gating\n[/HARNESS_ENVELOPE]\n\n[TOOL_SPEC]\n{\n  \"arguments\": [\n    {\n      \"arg_type\": \"string\",\n      \"default_value\": null,\n      \"description\": \"workspace root\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"workspace_root\",\n      \"nullable\": false,\n      \"path_like\": true,\n      \"repeated\": false,\n      \"required\": true,\n      \"sensitive\": false,\n      \"workspace_scoped\": true\n    },\n    {\n      \"arg_type\": \"array\",\n      \"default_value\": [],\n      \"description\": \"paths to inspect\",\n      \"enum_values\": [],\n      \"examples\": [],\n      \"location\": \"body\",\n      \"name\": \"focus_paths\",\n      \"nullable\": false,\n      \"path_like\": false,\n      \"repeated\": false,\n      \"required\": false,\n      \"sensitive\": false,\n      \"workspace_scoped\": false\n    }\n  ],\n  \"budget_hint\": {\n    \"network_cost_estimate\": 0,\n    \"sandbox_cost_estimate\": 1,\n    \"step_cost_estimate\": 1,\n    \"time_cost_estimate_ms\": 3500,\n    \"token_cost_estimate\": 128,\n    \"tool_call_cost_estimate\": 1\n  },\n  \"capability\": \"search\",\n  \"constraints\": {\n    \"allowed_isolation_modes\": [],\n    \"allowed_path_prefixes\": [],\n    \"approval_modes\": [],\n    \"auto_mode_allowed\": true,\n    \"emits_evidence_ids\": true,\n    \"emits_patch_ref\": false,\n    \"emits_receipt\": true,\n    \"emits_validation_receipt\": false,\n    \"forbidden_path_prefixes\": [],\n    \"mutates_workspace\": false,\n    \"plan_mode_allowed\": true,\n    \"required_permissions\": [\n      \"worktree\"\n    ],\n    \"required_task_statuses\": [],\n    \"requires_worktree\": true,\n    \"supports_compact_boundary\": false,\n    \"supports_resume\": true\n  },\n  \"description\": \"Repository reverse-engineering tool for code understanding, dependency tracing, and intent recovery.\",\n  \"invocation_mode\": \"read_only\",\n  \"metadata\": {\n    \"reverse_engineering\": true\n  },\n  \"outputs\": [\n    {\n      \"description\": \"bounded repository map\",\n      \"evidence_backwrite\": true,\n      \"kind\": \"evidence\",\n      \"name\": \"repo_map\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": false\n    },\n    {\n      \"description\": \"inspection receipt\",\n      \"evidence_backwrite\": false,\n      \"kind\": \"execution_receipt\",\n      \"name\": \"receipt\",\n      \"patch_relevant\": false,\n      \"reproducible\": true,\n      \"required\": true,\n      \"task_output_relevant\": false,\n      \"validator_relevant\": true\n    }\n  ],\n  \"phase\": \"execute\",\n  \"receipt_policy\": {\n    \"include_artifact_refs\": true,\n    \"include_budget_charge\": true,\n    \"include_evidence_ids\": true,\n    \"include_patch_refs\": true,\n    \"include_permission_decision\": true,\n    \"include_raw_value\": false,\n    \"include_task_output_refs\": true,\n    \"include_validator_refs\": true,\n    \"include_worktree_ref\": true,\n    \"receipt_statuses\": [\n      \"succeeded\",\n      \"failed\",\n      \"blocked\"\n    ]\n  },\n  \"risk_profile\": {\n    \"allowed_permissions\": [\n      \"worktree\",\n      \"session\"\n    ],\n    \"blocks_on_conflict\": false,\n    \"requires_clean_worktree\": false,\n    \"requires_confirmation\": false,\n    \"requires_evidence_before_trigger\": false,\n    \"risk_band\": \"low\",\n    \"sensitive_domains\": [\n      \"workspace\"\n    ],\n    \"side_effect_level\": \"none\",\n    \"supports_rollback\": false\n  },\n  \"summary\": \"Inspect repository structure, infer missing intent, and reconstruct bounded architecture facts.\",\n  \"tool_name\": \"repo_reverse_engineer\"\n}\n[/TOOL_SPEC]\n\n[USER_QUERY]\nDetect that repo_reverse_engineer should not fire because the required runtime preconditions are still unsatisfied.\n[/USER_QUERY]", "labels": {"tool_name": "repo_reverse_engineer", "mode_name": "precondition_gating", "trigger": 0, "schema_ok": 0, "precondition_ok": 0, "validator_required": 0, "worktree_required": 1, "rollback_supported": 0, "confirmation_required": 0, "session_required": 1, "permission_bits": [0, 0, 0, 0, 0, 0, 1, 0, 0, 1, 0]}, "metadata": {"tool_name": "repo_reverse_engineer", "mode": "precondition_gating", "focus": "precondition_gating", "split": "eval", "variant_rank": 0}}