[garrytan]

{
  "schema_version": 1,
  "pr": 3472,
  "head": "8c106d642b1b59d049404ee22f53dbc7252d4756",
  "version": "1.91.246.0",
  "base": "main",
  "gate": {
    "remote-gate": {
      "pass": 9261,
      "fail": 0,
      "skip": 0
    },
    "free-tests.yml": {
      "pass": 1,
      "fail": 0,
      "skip": 0
    },
    "windows-free-tests.yml": {
      "pass": 1,
      "fail": 0,
      "skip": 0
    }
  },
  "ci": {
    "free-tests.yml": "https://github.com/garrytan/gstack/actions/runs/40344967390",
    "windows-free-tests.yml": "https://github.com/garrytan/gstack/actions/runs/40344976952"
  },
  "spend_usd": 0.18,
  "session_kind": "unattended",
  "pregate": "requires-remote cleared @7761de88263c (1 checks, current for 8c106d642b1b)",
  "requires_remote": [
    "free-tests.yml/macos-named-regressions: https://github.com/garrytan/gstack/actions/runs/40344967390",
    "windows-free-tests.yml/windows-free-shard: https://github.com/garrytan/gstack/actions/runs/40344976952",
    "pregate.json/remote_gate: remote-gate tree=7761de88263c tests=9261"
  ],
  "issues": {
    "fixes": [],
    "refs": [
      3472
    ],
    "flakes": []
  }
}

What changed

The five captured gate slips (docsync --help retype, state-dir artifacts, preamble asset, 'wait for now' defer, bare probe --help) now replay as free tests: 5 fail on main's helpers, 0 fail with the repaired helpers, so the $1-per-rerun flakes are pinned without touching thresholds or trial counts.

Before/after as text: The five captured gate slips (docsync --help retype, state-dir artifacts, preamble asset, 'wait for now' defer, bare probe --help) now replay as free tests: 5 fail on main's helpers, 0 fail with the repaired helpers, so the $1-per-rerun flakes are pinned without touching thresholds or trial counts.

--- Before · before.txt · captured output
+++ After · after.txt · captured output
+$ bun test test/third-party-actions.test.ts test/qa-functional-prompt.test.ts test/docsync-lifecycle-interface.test.ts test/docsync-authority.test.ts   # this branch (8c106d6)
+ 167 pass
+ 0 fail
+Ran 167 tests across 4 files. [5.08s]
-$ bun test test/third-party-actions.test.ts test/qa-functional-prompt.test.ts test/docsync-lifecycle-interface.test.ts test/docsync-authority.test.ts   # origin/main helpers + this branch's tests
-error: expect(received).toBeDefined()
-(fail) the declared interface names every refused private-artifact root [138.56ms]
-error: expect(received).toEqual(expected)
-(fail) candidate call at a missing binary path (exit 127) > captured run 40323…742 ship-docsync-store: a mistyped --help after the declared usage was read > the capture passes; the mistyped --help alone is outside the interface [6.78ms]
-(fail) candidate call at a missing binary path (exit 127) > captured run 40323…742 ship-docsync-store: a mistyped --help after the declared usage was read > an earlier declared run excuses only --help, never snapshot or compare [8.22ms]
-error: expect(received).toContain(expected)
-(fail) the prompt grants --help to the evidence helper alone, and a bare probe --help stays outside the grammar [0.32ms]
-error: tpa-present 40290…102
-(fail) Opus consent renders (gate captures) > every consent question offers defer as a lettered option, including the paraphrased ones [0.51ms]
- 162 pass
- 5 fail
-Ran 167 tests across 4 files. [4.77s]
 

The 2026-10-26 train gates (40290033102, 40323989742) and the #3434 screen (40269992077) each failed one paid rule case that passed on its in-run rerun. The flake ledger grouped four of them as a "ship-docsync family"; the captured transcripts show three distinct slips plus a branch-specific fixture gap, and two more cases outside the family. Each is repaired where it arose, with the captured run replayed as a free regression and negative controls beside it. No threshold, trial count, case kind or budget changes.

Case	Run	Cause	Repair
ship-docsync-store	40323989742 slice 3	the parent read gstack-docs-candidate --help at the declared path, later typed a second --help at the shard root (exit 127), and went on to compare; candidateNotFound required the same command after the slip	a not-found --help is excused by the declared --help anywhere in the transcript; snapshot and compare keep the after-the-slip rule
ship-docsync-completion	40290033102 slice 2	snapshot --out, the saved section and the report insert went under <home>/state, gstack's GSTACK_HOME, which the authority refuses and the interface never named	the interface names where a private artifact lives and every refused root; the authority is unchanged
docsync-spawned	#3434 screen 40269992077 slice 13	#3434's generated SKILL.md names sections/preamble.md as a required asset; fixtureDocs copies a fixed list that lacks it, so the spawned child blocked ("Missing required skill asset")	the fixture installs sections/preamble.md when the generated skill has one; main's skills install exactly what they did
tpa-present	40290033102 slice 14	"D) Wait for now. I'll mark this step as blocked on you." is the contract's defer in other words; offersDefer knew defer/postpone/put off/skip/come back/leave	"wait for now" / "hold off for now" count as the option's own opening or sentence only
qa-functional-webhook-fix	40290033102 slice 9	the agent ran bun run probe -- --help bare before its first capture; the interface grants the helper's --help and says nothing about the probe's	the interface says that is the only --help and a bare probe call is a bypass; grammar and detector unchanged

ship-docsync-missing-asset (40290033102 slice 13) is not repaired: its only refused command was echo "find-exit:$?", a variable the shared read-only grammar text already rules out in so many words ("echo and printf with literal arguments only"; "variables … stay outside this grammar"). It is logged as Won't fix.

Two review-fix commits on top of the original head: 470ac55 tightens offersDefer so "wait for now" counts only when it ends its sentence (red-team finding), and 8c106d6 fixes the Windows-deterministic docsync-authority path assertion (outside-voice P1), accepts em/en dashes and curly apostrophes in the defer paraphrase, never counts a browser-drive option as a defer, and registers the two new docsync fixtures under their paid touchfiles (the remote free gate's one red).

Why

The docsync detector and interface are the contract the paid cases judge against; a false refusal of a harmless, already-answered help probe, and a refusal the prompt never disclosed, each cost a $1 rerun per gate and will keep doing so. The preamble gap turns red on every #3434 run and on every train after it merges. The tpa and qa-functional entries are the same shape as the GSTA-57/63/65 repairs already in the ledger.

Approvals

No approvals recorded for branch capy/gsta-107-paid-flakes.

Recorded by the thread (CREW rule 5 citation, kept from the original body):

Date	Ask	Words	Covers	Pending
2026-10-15	Focused paid runs	Garry: "it's fine run as many $93 paid gates as you want who cares" (CREW 5)	focused reruns of the repaired cases	none

Summary

• Paid-case flake repairs in test helpers and fixtures only (no product code): docsync observer --help carve-out, docsync interface naming every refused private-artifact root, fixtureDocs preamble install, offersDefer "wait for now" / "hold off for now" paraphrase, qa-functional helper-only --help sentence; captured runs replayed as free regressions with negative controls.
• Pre-landing review fixes (two commits): defer detector tightened and widened per findings; Windows path assertion split; fixtures registered under paid touchfiles.
• CHANGELOG entry under ## [Unreleased] (stamp-at-merge; VERSION, package.json and the agents digest untouched).

Test Coverage

No new application code paths to audit (test-only diff: helpers, fixtures, tests, CHANGELOG). Step 7 skipped.
Tests ran: remote free gate (Ubicloud standard-16, us-east-a2) 9261 tests, 0 failed on tree 7761de88263c (PREGATE_REMOTE spent $0.04).
Tests ran: focused at 8c106d6: third-party-actions + docsync-authority + free-fixtures 78 pass; touchfile/selection files 159 pass; typecheck green; typecheck:test 819 known diagnostics, none new.
Regression proof: base control (main's helpers + this branch's tests) 162 pass / 5 fail; this branch 167 pass / 0 fail (image above).

Pre-Landing Review

Review loop per CREW rule 23: 3 passes (the cap), converged with deferred items; no fourth pass.

• Pass 1 (whole diff at 2e3f7ba): specialists on anthropic/claude-sonnet-5-5 (testing, maintainability, performance, simplification: no findings; security: coverage note only). Red team (sonnet-5-5 high): 1 informational fixed in 470ac55 (over-broad clause-start match in offersDefer), 2 advisories deferred. Fix-range re-review 2e3f7ba..470ac55: clean.
• Pass 2 (adversarial at 470ac55): native anthropic/claude-fable-5-1 (informational) and outside voice openai/gpt-6.1-sol (P1: docsync-authority Windows path assertion). All fixed in 8c106d6. Codex CLI not installed (CODEX_MODE: not_installed); the outside voice ran as an OpenAI-model Capy subagent.
• Pass 3 (delta 470ac55..8c106d6 only): anthropic/claude-sonnet-5-5 high and openai/gpt-6.1-sol high. Nothing blocking under the rule-23 floor (no test fails, no production or data impact). Both recommend shipping with the items below deferred.

Deferred (named per rule 23; none fails a test):

• [P2] test/helpers/third-party-actions.ts:58: the new non-drive guard tests the whole option, so a legitimate defer that merely mentions Aside/browse/drive ("D) Wait for now. I'll mark this step as blocked until Aside is installed.") returns false. Fail-closed recall gap, not a consent bypass; the captured tpa-present option is unaffected. Suggested fix: apply the guard to the text before the matched phrase.
• [P3] test/helpers/third-party-actions.ts:59: an unspaced - ends the phrase, so "wait for now-do it yourself" counts; allow unspaced em/en dashes only.
• [P3] test/helpers/third-party-actions.ts:59: "I'll wait for now" / "We'll wait for now" are not accepted (contractions).
• Advisory: test/helpers/qa-functional-eval.ts:57 the interface sentence is stricter than the grammar it describes; test/helpers/docsync-fixture.ts:68 the preamble install is existence-gated (silent skip when the generated skill has none).
• Informational (native adversarial at 470ac55): bare --help only inside the carve-out; the 'ran' predicate; mixed separators; zsh-only exit-127 signature.

Gate edits: none detected (18 listed, 11 read; patterns: RH-1,RH-3,RH-4,RH-12,RH-13,RH-14,RH-15,RH-16; unlisted idioms: none). Detector relaxations in docsync-observer (--help carve-out) and third-party-actions (defer paraphrase) are justified by the captured-run replays and the negative controls in the same diff; no thresholds, budgets, trial counts or case kinds changed.
Outside review: openai/gpt-6.1-sol completed at 470ac55 (gate fail, fixed) and at 8c106d6 (gate pass with the P3 deferred). Codex CLI: not installed, recorded as such.

Exploratory QA

Functional surface only (test-helper diff): probes 001-007 under .gstack/qa-reports/ship-3472, verdict pass at 2e3f7ba; base control 006 proved the new tests red on main's helpers. No capture at 8c106d6 beyond the focused runs above and the base-control image. Browser/API/job surfaces not applicable. The paid cases themselves were rerun focused by the parent thread before this /ship and were not rerun here.

Design Review

No frontend files changed — design review skipped.

Eval Results

No prompt-related files changed — evals skipped. Paid cases not rerun by /ship (rerun focused by the parent thread beforehand).

Greptile Review

Greptile triage: UNAVAILABLE (dispatch failed) — no Greptile integration reachable from this unattended Capy run.

Plan Completion

Plan completion: not run (no Plan: binding in the PR body, no docs/designs plan candidate).

Issues

Refs #3472

Verification Results

No Step 8.1 obligations (no plan). Remote free gate PASS (9261/0), focused lanes PASS, typecheck PASS; dispatched CI runs listed in the receipt block.

TODOS

No TODO items completed in this PR.

Documentation

Status: current — read-only re-audit at head 8c106d6 (base ab9a854) found no factual doc correction needed and no blockers; no edits were made.

Audited scope: 15 committed files vs base (CHANGELOG.md [Unreleased] entry, six test helpers incl. touchfiles-data.ts, five test files, three JSON fixtures); staged, unstaged and untracked sets are empty. No product code changed. Banned-terms check: none (no list in the repo). Discovery used the candidate's 123-doc inventory; each doc that names a changed contract was checked by targeted grep or section read, not read end to end (see decisions).

CHANGELOG [Unreleased] fact check against the final tree:

• ship-docsync-store: candidateNotFound ignores a wrong-path --help (exit 127) when the declared --help ran anywhere in the transcript; snapshot/compare still need the retry after the slip. Matches docsync-observer.ts and the three lifecycle controls.
• ship-docsync-completion: interface names the refused roots (repository, installed skills, Claude config dir, <home>/state, <home>/remote.git); the authority is unchanged. Matches docsync-interface.ts; the replay test pins four refused commands and one refused write.
• docsync-spawned: fixtureDocs installs sections/preamble.md only when the generated skill has one. Matches the fixture and the dispatch test.
• tpa-present: accurate after the round-2 fixes. I ran offersDefer on sample options: "Wait for now. I'll mark…", "Hold off on this for now.", "I wait for now." and "We wait for now - …" count; "Wait for now and do it yourself.", "Do not wait for now.", the phrase outside a lettered option, and "A) I drive it in Aside. I wait for now." do not. The bullet omits two rules the code comment states: the phrase must end its sentence, and a browser drive option never counts. It does not contradict the code, so it is a wording note, not a blocker.
• qa-functional-webhook-fix: the helper-only --help sentence is present and the grammar is unchanged. Matches qa-functional-eval.ts and the prompt test.
• Tests list: 29 consent renders, 5 paraphrased defers, fixture source updated for run 40290033102. Matches.

Documentation health:
CHANGELOG.md Current — [Unreleased] entry matches the code; offersDefer bullet is accurate but less specific than the code comment (decision below)
AGENTS.md Current — no changed contract described
CLAUDE.md Current — not touched; no changed contract described
README.md Current — not touched; no changed contract described
CONTRIBUTING.md Current — touchfiles-data.ts description still correct
TODOS.md Current — not touched by the diff
docs/CHANGELOG_STYLE.md Current — no style conflict found for the Unreleased entry
docs/TESTING_INTERNALS.md Current — touchfiles-data.ts references still correct
docs/TEST_PORTFOLIO.md Current — docsync row still accurate
docs/evals/detector-inventory.md Current — dated snapshot at HEAD cbcccf9; its tpa-present row ("Aside, A), defer, dashboard host") still holds
docs/ship-policy.md Current — [Unreleased] handling unchanged

Cross-doc consistency: VERSION 1.91.246.0 equals the latest released CHANGELOG heading (the new entry is under [Unreleased], as the stamp-at-merge flow expects); package.json 1.91.246 is the matching npm form. No narrative contradictions found.

Documentation coverage: no new public surface (test-infrastructure repairs only). Common gap: docs/TEST_PORTFOLIO.md names no row for third-party-actions, qa-functional-prompt or ship-document-release-dispatch (reference-only debt that predates this diff); not filled.

Diagram drift: none. No ARCHITECTURE diagram entity is renamed, split or removed by the diff.

Test plan

• gstack-pregate --stage tests --base main --remote --spend-cap 2 (Ubicloud standard-16): PREGATE_REMOTE tree=7761de88263c tests=9261 failed=0 spent=0.04
• bun test test/third-party-actions.test.ts test/docsync-authority.test.ts test/free-fixtures.test.ts: 78 pass
• bun test touchfile/selection files (7): 159 pass
• bun run typecheck + bun run typecheck:test: green, 819 known, none new
• Base control (origin/main helpers + this branch's tests): 162 pass / 5 fail; branch: 167 pass / 0 fail
• Dispatched CI: free-tests.yml and windows-free-tests.yml at 8c106d6 (URLs in the receipt)

[trunk-io]

😎 This pull request was merged.