[CLAUDE] Docs: S101 session-end closeout — §L auto-maintain (AS-10 recurrence + 2 monitor CHOT + model-note uniform)

- error-ledger E-006: AS-10 recurrence S101 (fire 5-6 from workflow-lanes; harvest-curator Fidelity-gate PASS -> KEEP per keep-if-correct, differs from S95-revert because S101-writes clean; GAP-3 dogfood-validate convention-not-mechanism; guard git-diff HELD 6/6 0-escape)
- session-start BUOC 0.6: +S101-Opus caveat (F-H19b, uniform with STATUS:24 + agents/README:3)
- harvest-curator diary: S101 @closeout GATE PASS 5/5 truc + AS-10 legit-keep Fidelity-call (on-behalf B3)
- tooling-auditor diary: S101 @closeout CHOT 4-mat + command 14->16 (COMMAND not skill) + model-drift #5 + F-H19a-defer (on-behalf B3)
- monitors verdict: harvest-curator GATE PASS (0 orphan, 0-byte 0/11, U+FFFD 0/11, containment OK) + tooling-auditor CHOT (11=11=11, 18/15/3, H19 docs full path:line-verified)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.claude/agent-memory/harvest-curator/MEMORY.md

@@ -39,3 +39,4 @@ H2 harvest-MD-integrity auditor **SOLUTION_ERP-self**. Read-only + **propose-onl
 - **2026-07-02 (S98 @start RE-REPORT — post-S97, on-behalf em main APPEND B3):** Self-report `claude-fable-5` (inherit — Fable-restore evidence, cặp với H1 cùng ngày). Verdict: (a) harvest S97 8-commit **CLEAN** — 0-byte=0 · U+FFFD=0 · tail 11/11 sạch; archive `2026-H1.md` impl-fe **moved-not-cut VERIFIED-git** (baseline 791ec55 S76/S78/S79 đều present; "S77" = range-label không tồn tại — đừng false-alarm). (b) **3 delta mồ-côi propose-APPEND** (em main VERIFY→APPEND cùng session): database-agent MISS ×2 spawn S97 (Part-4 điều-tra Mig60-wrong-table + Part-5 lane integrity; file đóng băng từ S57bis — miss nặng nhất) → 1 record gộp 4-field · reviewer addendum Part-5 fail-return-schema vào entry S97-bis · impl-fe hook 1-dòng Part-2 `finalizeFlowStep`. (c) Orphan runs **0/15** (ledger `⏳` chỉ dòng legend); NOTE INFORM: S97 2 HMW workflow (`wf_0e01fdba`/`wf_4951c347`) **ephemeral KHÔNG ghi run-folder** = pattern S94+ — ledger H10 hiện chỉ cover run kiểu cũ. (d) Stray=0 (guard S76 giữ). **Flags:** cicd self-tag "S98"→S97 ×4 dòng (:54/:55/:73/:75 — session-tag drift lần 4; em main patched `replace_all` TRƯỚC khi S98 thật ghi entry, tránh grep-collision) · **cicd L1 19.9KB > self-target 17.1KB garble-pressure (#53 structural) → archive-sớm @closeout** · impl-be 23.9KB gần cap watch. Tag `[s98-start, 3-orphan-append, cicd-s98-tag-patched, fable-restore-evidence, on-behalf]`.
 - **2026-07-02 (S99 @start RE-REPORT — post-S98 same-day):** Verdict 🟢 gần-CLEAN — duy nhất 1 delta mồ-côi = cicd `:73` entry **#485 (rn 371) `8a249c5` GO** mtime 11:06:03 SAU commit-cuối 10:57:45 = orphan-by-construction (post-closeout verify, precedent S58 #385/#386) · fidelity ARITHMETIC-verified độc lập: push-range `310b9fc..8a249c5` = 23 file = 22 .md + đúng 1 non-md `memory-budget.json` khớp claim từng-chữ · tag "S98" ĐÚNG (hết drift sau patch S98) → propose COMMIT vào bundle đầu S99, KHÔNG revert. 3 orphan-append S98 **đóng thật tại HEAD** (db-agent `:36` gộp 4th+5th · reviewer `:72` addendum Part-5 · impl-fe `:16` hook Part-2 — đủ 4-field + on-behalf label). Orphan run **0/16** ledger all-closed (mode-A note live; folder mới=0 từ 06-18, chỉ `_ledger.md` mtime 07-02 committed). 0-byte=0 ×2 nơi · tail 11/11 `0a` · U+FFFD hit đều quoted-cũ (cicd `archive/2026-06.md:26` #377 + archive MÌNH — L1 mình + cicd L1 SẠCH sau curate). Chore: impl-be 23.9KB sát cap 25.6KB watch (đứng im từ 06-25, không phình). **Self-curate S99:** L1 19.9→~9KB, S50-S66 → `archive/2026-06.md` (17072B, 14 entry, moved-not-cut grep 5/5) — hook-triggered, trong quyền diary-mình. Wrote OWN diary. Tag `[s99-start, cicd-485-orphan-sane, arithmetic-fidelity, self-curate-L2, clean]`.
 - **2026-07-02 (S100 @start RE-REPORT — post-S98+S99, on-behalf em main APPEND B3):** Verdict 4-trục ALL-CLEAN + 1 live-delta. (1) Delta S98/S99 committed đúng nhà (`4263d63`/`8a249c5`/`c112be9`), 0 mtime>HEAD; duy nhất tooling L1 dirty 14:38:42 = entry S100 tự-ghi (NOT-in-HEAD) → commit bundle bootstrap. (2) Mồ-côi 0: S98 2-monitor + 3 orphan-append S97 đóng + cicd #485 tại `:73` · S99 2-monitor đủ 4-field. (3) Orphan run 0/14, ledger 0 `⏳`, mode-A by-design. (4) 0-byte 0/11 · tail 11/11 `0a` · U+FFFD 2-file quoted-cũ known · tooling archive spot-check 3-hit moved-not-cut · impl-fe gist ADDITIVE. INFORM: S99 push `8a249c5..525a01a` (9 .md docs-only, CI path-filter skip) chưa cicd-verify — optional. Chore: impl-be 23.9KB đứng-im 06-25 watch · fe-designer 21.5KB + reviewer 20.7KB > self-target 17.1KB garble-pressure watch. Method-new: monitor song-song ghi diary GIỮA 2 batch scan → batch-1 status/mtime = stale-snapshot, re-check trước khi phán dirty/orphan. Tag `[s100-start, 4-truc-clean, tooling-l1-live-delta, on-behalf]`.
+- **2026-07-03 (S101 @start + @closeout — on-behalf em-main APPEND B3):** @start RE-REPORT ALL-PASS/CLEAN (0-orphan · 0-byte 0/11 · 0-corruption + cicd #486 dirty-delta fidelity-verified→commit). @closeout **GATE PASS 5/5 trục** (S101 = 2 commit `f229b07` H18-WF2-closeout + `e350660` H19-formal-adopt): Coverage COMPLETE 6 spawn-touchpoint (2 monitor + WF1-invest investigator-cb + WF2-H18/H19 reviewer ×2), Corruption U+FFFD=0/11 · tail-0a=11/11, close-gate **0 July-run-folder** (mode-A ephemeral confirmed) → 0-orphan. 🔴 **AS-10 Fidelity-call: LEGIT harvest NOT residual-violation** — WF1+WF2 lanes tự-ghi agent-memory (frontmatter "update-MEMORY-before-return" override HMW-return-only) NHƯNG verify ĐỘC-LẬP content khớp lane-verdict (reviewer README:51-fix landed-verbatim hunk `@@-48,5+48,5`, 0 fabrication) + containment intact committed → **KEEP đúng per keep-if-correct** (KHÁC S95-default-revert vì S101-writes CLEAN, quyết bằng Fidelity-gate KHÔNG tự-phán). Cross-link H19 §K.C GAP-3 dogfood-validate "N-lane-return-only = convention KHÔNG mechanism" (fire 6, catch 6, 0 escape). Chore-watch: impl-be 23955B near-cap 93.6% (đứng-im 06-25) · reviewer 20728→19357 net-shrink healthy · self diary 8434B healthy. Method-#5 self-trap: empty-grep từ `+-`-filter choking leading-bullet → dùng method-#5 fix (false-alarm caught). Tag `[s101-gate-pass-5truc, as10-fidelity-legit-keep, gap3-dogfood, on-behalf]`.

.claude/agent-memory/tooling-auditor/MEMORY.md

@@ -41,3 +41,4 @@ H1 tooling-freshness auditor **SOLUTION_ERP-self**. Read-only + **propose-only**
 - **2026-07-02 (S99 @start RE-REPORT — ①②③ PASS, ④DOCS 3-flag):** HEAD `8a249c5`, tree 1-dirty pre-existing (cicd MEMORY M). ①SKILL PASS: 6+23+marketplace-35 unchanged; ef-core S98-update VERIFIED (:3/:19 "Mig 61"+B1, rows 60/61 `:82-:83` khớp STATUS:14, `:85` 89-bảng khớp STATUS:15, 0 residual); skills/README:20 "Updated S98"/:90 #79 fresh; dep-audit:153 B1 sạch; commands 14 file no-change. ②ROSTER PASS 11=11=11; frontmatter 11/11 `model: inherit` H8; **spawn này self-report `claude-fable-5` = inherit-chain data-point #3**; VALID_ROLES 9 product-only by-design (hmw.js:22 = README:201). ③PLUGIN PASS 18/15/3 identical + xhigh, 0 new-alloc. ④DOCS 3 FLAG: **(F1)** S98 closeout không flip — STATUS:38 row `🟡 in-progress` + STATUS:6/HANDOFF:5 header kẹt S97, session-log S98 không tồn tại; **(F2)** session-start.md `:8`/`:62` "SendMessage KHÔNG khả dụng" stale vs runtime deferred-tools (em main verify runtime TRƯỚC khi patch — disk không tự chứng được); **(F3) NEW-catch** session-start.md`:44` "gotchas.md (68)" hard-count stale (thật 79, lệch 11) — **commands/*.md nằm ngoài count-grep monthly** → propose B1-pointer + mở rộng checklist. Carry-flag ĐÓNG: docs/CLAUDE gotcha "(55)" đã B1-pointer. Còn: schema-diagram §16+ Mig 32-61 ERD debt. L1 compacted 19.6→~9KB (hook), 12 entry → `archive/2026-06.md` NGUYÊN VĂN. Tag `[s99-start, 4-mat, s98-flip-miss, sendmessage-stale, command-count-catch, l1-compact]`.
 - **2026-07-02 (S100 @start RE-REPORT — ALL-4 PASS, F1/F3 fix-verified, F2 carry):** HEAD `525a01a`, tree CLEAN (cicd-MEMORY dirty S99 đã commit trong `c112be9`). ①SKILL PASS: 6+23+14 identical; last-touch skills/ = `4263d63` S98 (0 đổi từ S99-verify); ef-core `:3` B1+Mig61 khớp disk-61, skills/README:20 fresh. ②ROSTER PASS 11=11=11 (README:1 "11-agent" = STATUS:24), 11/11 inherit, last-touch agents/ = S98. ③PLUGIN PASS 18/15/3 (settings:17-35) + marketplace 35 + xhigh:37 + `claude-fable-5[1m]`:11 — identical, 0 new-alloc. ④DOCS PASS: **F1 FIXED-verified** (STATUS:6 flip-note "hồi-tố @S99-start" + In-Progress:34 "(S99)" row-stale-gỡ, chỉ còn :38 PE-phân-quyền pending; HANDOFF:5 khớp) · **F3 FIXED-verified** (session-start:44 B1-pointer, grep 0 "(68)") · **F2 OPEN-tracked** (session-start `:8`/`:62` SendMessage-note còn — HANDOFF:5 NEXT-em carry chờ runtime-verify, KHÔNG new-drift). Counts khớp disk: Mig 61 · gotcha 79 (grep `^### [0-9]`) · 89 bảng · test 440 (canonical-consistent). NOTE-minor: S99 không blurb riêng (docs-micro-session, documented inline flip-note + commit-title) — acceptable, S100-closeout tự quyết. Carry-debt: schema-diagram §16+ ERD · monthly count-grep +commands/*.md. Method: session KHÔNG-đổi-tooling → `git log -- .claude/skills/` last-touch = shortcut verify mạnh hơn re-read từng file. Tag `[s100-start, 4-mat, all-pass, f1-f3-verified, f2-carry]`.
 - **2026-07-03 (S101 @start RE-REPORT — ALL-4 PASS + MODEL-DRIFT, on-behalf em-main APPEND B3):** HEAD `5ee32c0`, tree 1-dirty (cicd MEMORY M #486 pre-existing). ①SKILL PASS 6+23+14 (2 detector-flag ef-core/contract-workflow = FP module-local, numbers MATCH canonical). ②ROSTER PASS 11=11=11, 11/11 inherit, ASCII-diagram cosmetic-drift known-debt. ③PLUGIN PASS 18/15/3 + marketplace 35 + xhigh + `claude-fable-5[1m]`:11 identical, 0 new-alloc. ④DOCS PASS (S100 closeout clean; F2 SendMessage + F3 count both fixed-verified). 🔴 **MODEL-DRIFT (inherit-chain data-point #4 = DIVERGENT):** this spawn + lead + WF2-reviewer all self-report **`claude-opus-4-8`** (NOT `claude-fable-5` S98/S99) while `settings.json:11` still pins `claude-fable-5[1m]` → **Fable unavailable S101 → H5-fallback tự-kích** (revert-free, no frontmatter change). "Fable RESTORED S98" = point-in-time NOT steady-state → em-main reconciled STATUS:24 + agents/README:3 with S101-runtime caveat. Lesson: **inherit-chain self-report = runtime availability probe — verify each session, don't trust last-session model claim.** Tag `[s101-start, 4-mat, all-pass, model-drift-opus, h5-fallback-reactivated]`.
+- **2026-07-03 (S101 @closeout CHỐT — on-behalf em-main APPEND B3):** HEAD `e350660`, tree CLEAN, 2 commit S101 pushed (`f229b07` H18-closeout + `e350660` H19-adopt). ①SKILL/COMMAND **DELTA: command 14→16** (+`fable-real.md`+`fable-clone.md` H19 thật/ảo-toggle — verified `ls|wc`=16; 🔴 **là COMMAND KHÔNG phải skill** — SlashCommand-tier ≠ `skills/<n>/SKILL.md` Skill-tier, đừng conflate "auto-registered skill"; skill vẫn **6+23**) + session-start BƯỚC 0.5b + send-email 6c present. **KHÔNG command-catalog canonical** trong docs → 2 fable-* KHÔNG tạo catalog-drift, KHÔNG cần doc-register. ②ROSTER 11=11=11 (H19 0 agent mới, dùng reviewer+investigator-cb sẵn), 11/11 inherit. ③PLUGIN 18/15/3 identical + xhigh + pin-fable giữ (revert-free dù runtime-Opus), 0 new-alloc. ④DOCS PASS: H19 đầy-đủ path:line-verified (engine §K:315-334 + ACTIVE-MARKS:19 RC-verbatim + STATUS:6/:24/:40 + HANDOFF + session-log + 4 adap-report). 🔴 **model self-report `claude-opus-4-8` = inherit-chain data-point #5 DIVERGENT-confirmed** (Fable vẫn unavailable). **new-alloc: NOTHING-TO-ALLOCATE.** **Flags:** F-H19a LOW (agents/README+reviewer+investigator-cb 0 H19-note → **DEFER** vacuously-inert + no-catalog + single-sourced §K; note khi Fable-về + toggle-first-run có runtime-delta) · F-H19b VERY-LOW (session-start BƯỚC-0.6 Fable-steady → em-main FIXED S101 +Opus-caveat). Baseline command-count 14→**16** (self-fix note). Tag `[s101-closeout, 4-mat-chot, command-14-16, model-drift-5, f-h19a-defer, on-behalf]`.

.claude/commands/session-start.md

@@ -34,7 +34,7 @@ Em main đọc `.claude/fable-real-mode.on` → **BÁO ngay** (mode phán-quyế
 
 ## 📋 BƯỚC 0.6 — Model-availability check (H5 — adopt S63)
 
-Em main xác nhận **lead model resolve được** đầu session. Lead SE = **Fable 5 (1M) Max** (per H4). **DOWN** = lỗi `"Model isn't available — claude-fable-5[1m]"` → fallback **`/model claude-opus-4-8[1m]`** (Opus 4.8 · 1M · Max — top-tier, KHÔNG hạ §A1; **KHÔNG sửa frontmatter agent** — promote `inherit` tự theo lead → two-tier tạm collapse single-tier Opus, **revert-FREE** khi Fable về). Phản xạ THỦ-CÔNG (không hook tự-switch). ✅ **Fable RESTORED 2026-07-02 (S98)** — lead chạy `claude-fable-5[1m]` (settings.json:11) + spawn-test inherit ×2 monitor self-report `claude-fable-5` → H5.6 hoàn tất, caveat suspended-2026-06-12 (fallback Opus S62→S97) đã gỡ. Nếu DOWN lại → fallback theo quy trình trên.
+Em main xác nhận **lead model resolve được** đầu session. Lead SE = **Fable 5 (1M) Max** (per H4). **DOWN** = lỗi `"Model isn't available — claude-fable-5[1m]"` → fallback **`/model claude-opus-4-8[1m]`** (Opus 4.8 · 1M · Max — top-tier, KHÔNG hạ §A1; **KHÔNG sửa frontmatter agent** — promote `inherit` tự theo lead → two-tier tạm collapse single-tier Opus, **revert-FREE** khi Fable về). Phản xạ THỦ-CÔNG (không hook tự-switch). ✅ **Fable RESTORED 2026-07-02 (S98)** — lead chạy `claude-fable-5[1m]` (settings.json:11) + spawn-test inherit ×2 monitor self-report `claude-fable-5` → H5.6 hoàn tất, caveat suspended-2026-06-12 (fallback Opus S62→S97) đã gỡ. Nếu DOWN lại → fallback theo quy trình trên. ⚠️ **S101 (2026-07-03): runtime = Opus LẠI** (Fable unavailable — lead + 3 spawn inherit-chain self-report `claude-opus-4-8`) → H5-fallback tự-kích, revert-free; "RESTORED S98" = point-in-time KHÔNG steady-state (chi-tiết STATUS §Sub-agents).
 
 ## Phase 1 — READ (load context)
 

docs/governance/error-ledger.md

@@ -89,6 +89,7 @@ Detect by **action-signature** (NOT "AI tự phán có vi phạm không"). Scan
 - **prevention/guard:** RECOMMEND (anh / AI_INFRA, charter-v2 infra): harden monitor tool-grant — `Write/Edit` removal alone leaves Bash residual → consider a session-end hook blocking sub-Bash-write to tracked paths, OR accept commit-gate as sufficient defense-in-depth. Fidelity: if monitors write, their reports MUST disclose it → escalate 🟥 reviewer if recurs. Provenance timing-implicated, **not definitively attributable** (no false accusation).
 - **recurrence S93 (2026-06-29):** AS-10 2nd fire — 3 WF1 workflow-agents (investigator-codebase ×2 + reviewer, return-only) self-wrote agent-memory (diary append + archive self-curate + 1 stray `project_s92_*` mis-named file). git-diff post-P2 containment caught ALL → em-main reverted (kept cicd-monitor PE-deploy harvest hợp-lệ). Guard HELD again. **WF2 fix:** added explicit "RETURN-ONLY: do NOT write ANY file incl MEMORY.md" to every lane prompt → **0 residual** (instruction-fix worked, git-diff confirmed). Lesson: workflow-agent frontmatter "update MEMORY before return" fights return-only mandate → prompt MUST override + git-diff is the net (G-015, not mechanized).
 - **recurrence S95 (2026-07-01, H17 adopt):** AS-10 **3rd + 4th fire** — WF1 (investigator-codebase self-compacted its MEMORY.md 25.5→16.98KB, CLAIMED archive-move but `archive/2026-06.md` was NOT created → keeping it would have LOST 8.5KB) + WF3-Lane-A (reviewer self-wrote diary + new `project_s95_harness17_faultinjection.md`). git-diff post-P2 caught BOTH → em-main reverted; cicd-monitor diary KEPT (normal-monitor-spawn, NOT return-only = legit). Guard HELD 2×. **🔑 Instruction-fix NOT 100%:** WF2(H17) had explicit return-only → 0 residual, but **WF3 ALSO had explicit "TUYỆT ĐỐI return-only" yet reviewer STILL self-wrote** → persona-write is stochastic; explicit-prompt REDUCES but does NOT eliminate → **git-diff-revert remains the mandatory net (G-015 reconfirmed, instruction-alone insufficient).** Distinction codified: workflow-return-only-agent = REVERT; normal-monitor-spawn (diary verdict) = KEEP. **Dogfood:** contained WHILE adopting H17 whose C3-floor = single-writer — the very floor being adopted saved real data. Guard net-effect ++ (4 fires, 4 catches, 0 escape).
+- **recurrence S101 (2026-07-03):** AS-10 **fire 5-6 từ WORKFLOW LANES** (không phải monitor) — WF1-H19 `investigator-codebase` + WF2-H18/H19 `reviewer` auto-ghi agent-memory theo frontmatter "Update MEMORY before return", bypass HMW B3 single-writer. git-diff bắt (session-end change-set) → **harvest-curator Fidelity-gate PASS** (verify ĐỘC-LẬP: reviewer README:51-fix claim landed-verbatim hunk `@@-48,5+48,5`, 0 fabrication; U+FFFD=0/11; containment intact — committed `e350660`) → **KEPT per AS-10 keep-if-correct.** 🔑 KHÁC S95 default "workflow-lane=REVERT": S95 writes CÓ vấn-đề (stray mis-named file · claimed-missing-archive) → revert; S101 writes = CLEAN harvest khớp lane-verdict → keep-if-correct thắng. **Quyết bằng Fidelity-gate (harvest-curator), KHÔNG tự-phán** (đúng §L.b(f) — nghi-bịa→escalate 🟥 reviewer; ở đây 0-flag). **Cross-link:** dogfood-validate H19 §K.C GAP-3 "N-lane RETURN-only = convention KHÔNG mechanism" — chính phiên codify GAP-3 thấy nó fire. Guard git-diff + Fidelity-gate HELD (6 fire, 6 catch, 0 escape). Tension frontmatter "update-MEMORY-before-return" ⟂ HMW "return-only" stays-on-watch (commit-gate đủ defense-in-depth, chưa cần hook-block).
 - **tags:** [containment-residual-write / monitor-sub+workflow-agent / governance-docs+agent-memory]
 
 ### E-005 — AS-1 `git add -A` on S49 governance commit (self-caught @session-end §L.a)