Phase 04+05: service-agent gating, product coherence, release 0.2.8

.gitignore

@@ -13,3 +13,7 @@ dist/
 .planning/
 .agents/
 skills-lock.json
+
+# Runtime-generated demo output (golden-path bootstrap writes here).
+examples/service-operator-golden-path/output/
+examples/service-operator-bootstrap/output/

.planning/ROADMAP.md

@@ -0,0 +1,68 @@
+# Planning Roadmap
+
+Generated: 2026-05-18  
+Refreshed: 2026-05-28
+
+## Invariant at Stake
+
+Planning may compile product intent into proposed work. It must not become authority, and it must not silently import archived or draft artifacts as completed truth.
+
+## Current Track (`.planning/phases/`)
+
+This is the active planning track. The legacy `docs/plans/` track is preserved at the bottom for provenance.
+
+| Phase | Folder | Status | Last update |
+|-------|--------|--------|-------------|
+| 02 | [`02-address-concerns`](./phases/02-address-concerns/) | **Complete** — see [02-VERIFICATION.md](./phases/02-address-concerns/02-VERIFICATION.md) and [02-UAT.md](./phases/02-address-concerns/02-UAT.md) | 2026-05-28 |
+| 03 | [`03-close-enforcement-gaps`](./phases/03-close-enforcement-gaps/) | **Complete** — see [03-VERIFICATION.md](./phases/03-close-enforcement-gaps/03-VERIFICATION.md) | 2026-05-28 |
+| 04 | [`04-service-agent-gating`](./phases/04-service-agent-gating/) | **Complete** — see [04-VERIFICATION.md](./phases/04-service-agent-gating/04-VERIFICATION.md) and [04-UAT.md](./phases/04-service-agent-gating/04-UAT.md) | 2026-05-29 |
+| 05 | [`05-product-coherence`](./phases/05-product-coherence/) | **Complete** — see [05-VERIFICATION.md](./phases/05-product-coherence/05-VERIFICATION.md) and [05-UAT.md](./phases/05-product-coherence/05-UAT.md) | 2026-05-29 |
+
+### Phase 05 framing
+
+Phase 05 is the post-Phase-04 product unification pass. It is **not** a new mechanism layer. It covers four buckets:
+
+- **A — Phase-04 deferred lane** (service mutation manifest, HTTP profile adapter conformance expansion, dual-enforcement inventory slice, operator runbooks, D-25 per-customer scaffolds)
+- **B — Surface scrub** (live evidence fetch parity across CLI/SDK/MCP, one-import agent ergonomics, intent-compilation projection stage, correlation index, hosted-admission consolidation polish)
+- **C — Narrative polish** (README + protocol-layman category-claim integrity, developer-experience-index persona golden paths, Diataxis doc coverage, forbidden-copy lint expansion, concierge demand test scaffold)
+- **D — Keel-integrity audit** (10-invariant re-verification, gateway-held credential custody for x402 signer, adversarial architecture test promotion, global transition admission matrix at HTTP, mandatory generated-execution-graph for agent-origin compilations)
+
+Comprehensive-scale (target ~10–14 plans). Phase 05 plans assume Phase 04 lands first.
+
+## Current Phase
+
+**Phases 04 and 05 are complete locally** (2026-05-29). Remote ship (PR/merge/npm publish) is deferred until gh and npm credentials are available.
+
+**Phase 04** — service-agent gating: operator golden path, dual-enforcement doctrine, structural HTTP/example gating, tier gates 10/10 + 15/15. See [04-VERIFICATION.md](./phases/04-service-agent-gating/04-VERIFICATION.md).
+
+**Phase 05** — product coherence: deferred lane, live-fetch spine, narrative + forbidden-copy lint, gateway-held x402 custody (Mechanism A), keel audit. See [05-VERIFICATION.md](./phases/05-product-coherence/05-VERIFICATION.md).
+
+## Smallest Next Mechanism
+
+Push branch, open PR, and run remote CI/npm publish when tooling allows. Optional hygiene: pre-existing manifest-coverage and repo-naming-posture test residuals.
+
+---
+
+## Historical Track (legacy `docs/plans/`)
+
+The earlier planning track lived under `docs/plans/`. Retained for provenance; **not the current source of truth**. The active track is `.planning/phases/` above.
+
+**Completed (legacy):**
+
+- `docs/plans/01-plan-eng-review-primitive-fields-state.md`
+- `docs/plans/01a-plan-eng-review-protocol-migration.md`
+
+**Current (legacy):**
+
+- `docs/plans/02-plan-eng-review-authority-hardening.md`
+
+**Archived / not executable:**
+
+- `docs/plans/archive/02-plan-eng-review-agent-requirements.md`
+- `.planning/archive/agent-native-product-requirements-handoff/*`
+
+**Next (legacy):**
+
+- `docs/plans/03-plan-protected-mcp-cli-preview-deploy.md`
+
+Treat the `docs/plans/` track as historical context for the kernel and authority-hardening work that fed the current `.planning/phases/` track. Do not promote legacy plans into CI names, exports, or product claims without re-anchoring them in the current phase structure.

.planning/STATE.md

@@ -0,0 +1,73 @@
+---
+gsd_state_version: 1.0
+milestone: v1.0
+milestone_name: milestone
+status: phases_04_05_complete_local
+last_updated: "2026-05-29T00:00:00Z"
+progress:
+  total_phases: 5
+  completed_phases: 5
+  total_plans: 42
+  completed_plans: 42
+  percent: 100
+---
+
+# Local Planning State
+
+Generated: 2026-05-24  
+Updated: 2026-05-29 (Phase 04 + 05 local close-out)
+
+## Current Mode
+
+Planning scratch is local-only. Canonical repo truth lives in `AGENTS.md`, `README.md`,
+`QUALITY.md`, `STRUCTURE.md`, and `docs/internal/*`.
+
+## Current State
+
+**Phases 04 + 05 complete** on branch `phase-05-product-coherence` @ `4509826`,
+**pushed to origin** (`origin/phase-05-product-coherence`). Phase 04 is an ancestor of
+Phase 05, so this single branch carries both phases. `phase-04-service-agent-gating` is
+also on origin @ `74ff1f1`. Operator tier **10/10** and full tier **15/15** gates green;
+`npx tsc --noEmit` clean; `bun test` **849 pass / 3 fail** (acceptable residuals only;
+HR-01 classifier-doctrine fix landed @ `e60fc87`).
+
+**Remote land — partial:** branch pushed ✓. Still pending (require credentials absent in
+this environment):
+- **PR + merge to main** — `gh` CLI absent; create via web:
+  `https://github.com/CreasyBear/handshake-protocol-source/compare/main...phase-05-product-coherence`
+- **npm publish** — `npm whoami` returns 401; needs `npm login` (or a token in `~/.npmrc`)
+  before `npm publish`. Confirm version (`package.json` 0.2.7) is not already taken.
+
+## Phase Status
+
+| Phase | Folder | Status |
+|-------|--------|--------|
+| 02 | `02-address-concerns` | Complete |
+| 03 | `03-close-enforcement-gaps` | Complete |
+| 04 | `04-service-agent-gating` | Complete — [04-VERIFICATION.md](./phases/04-service-agent-gating/04-VERIFICATION.md) `passed` |
+| 05 | `05-product-coherence` | Complete — [05-VERIFICATION.md](./phases/05-product-coherence/05-VERIFICATION.md) `passed` |
+
+## Locked Premise
+
+Current scratch reference:
+
+- `.planning/macro/PLAN.md`
+
+It is scratch coordination only. Promote durable decisions into canonical docs or
+source tests before relying on them.
+
+## Do Not Do
+
+- Do not treat `.planning/` as repo truth.
+- Do not use old Tier 2/preview-deploy planning state as current product direction.
+- Do not choose a first adapter or shipment path unless tracked source and docs support it.
+- Do not treat human personas, dashboards, public routes, or Cloud surfaces as the first unit of product planning.
+- Do not claim gateway enforcement unless a gateway check owns the mutation boundary.
+- Do not expand canonical product docs from scratch planning without source-backed tests.
+
+## Smallest Next Mechanism
+
+Remote ship when tooling allows: push `phase-05-product-coherence`, open PR, run CI,
+and npm publish per release policy. Optional: fix pre-existing manifest-coverage and
+repo-naming-posture residuals; await `05-REVIEW.md` if a sibling code-review agent
+still lands it.