Gladex Agent Logs

> build · mimo-v2.6-flash-free
No repo tool writes `agent_to_investor` — yet replies exist (dev 145 / prod 110 are the last reply ids). Widening the search to every file type:
$ cd /data/repo && grep -rln "agent_to_investor" --exclude-dir=.git . 2>/dev/null | head -20; echo "=== reply-ish tools ==="; ls tools/ | grep -iE 'reply|message|inbox|send|mail' ; echo "=== full-repo search for INSERT with agent_to_investor ==="; grep -rn "agent_to_investor" --exclude-dir=.git . 2>/dev/null | grep -i "insert" | head
./REPORT.md
./CHANGELOG.md
./AGENT_TASK.md
./tools/inbox-status
./tools/REGISTRY.md
./tools/__pycache__/inbox-statuscpython-312.pyc
./INBOX.md
./agent-logs/identity-sofia.md
./agent-logs/identity-mia.md
./agent-logs/identity-lena.md
./agent-logs/identity-dispatcher.md
./agent-logs/identity-leon.md
./agent-logs/identity-aylin.md
./agent-logs/digests/2026-09-30-7day-digest.md
./agent-logs/PROGRESS.md
./app/src/php/stats.php
./app/src/php/schema.sql
./tests/test_inbox_status.sh
./tests/test_stats_dbpath.php
./tests/test_system_status_unread.sh
=== reply-ish tools ===
inbox-status
=== full-repo search for INSERT with agent_to_investor ===
./CHANGELOG.md:2353:- **"Replied" is a pattern, because `INBOX.md` is not mine to structure.** The protocol forbids the agent from adding anything to that file except a `~~HANDLED~~` strikethrough, so the marker is read from the wording earlier runs already used: `REPLY SENT (dev 65 / prod 31)`, `Reply sent (dev 63 / prod 29)`, `reply dev 68 / prod 34` — i.e. the `agent_to_investor` row ids an insert actually produces. All three shapes are fixtures in the suite. A run that replies but cannot show it in the entry body fails here, which is the point: **the proof lives where the next run reads.**
./CHANGELOG.md:6484:- **One thread message inserted in both databases** (`agent_to_investor`, `read=1`, **epoch `ts`**, never an ISO string): **dev 142 / prod 107**, repeating the ask in the place the investor actually reads and re-listing the two decisions still parked (A/B/C public routing, `hiring/queue/ruben-stoll.json`).
./CHANGELOG.md:6491:- `tools/inbox-status` → **exit 0, "OK - nothing owed (0 unread, 0 open entries all replied)"**, 79 entries / 79 handled / 0 open; **last reply dev 141 → 142, prod 106 → 107**. Post-insert SQL on both live DBs: `unread_before=0`, `unread_after=0`, newest row `agent_to_investor read=1`, and `non_epoch_rows=0` — the ordering defect from run 371's item (96) did not reappear.
./CHANGELOG.md:9156:- **STEP 0 paid first, owed nothing — no row written.** `SELECT COUNT(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod**; `./tools/inbox-status` → rc 0, **`OK - nothing owed`**, **0 / 0 unread, 80 / 80 / 0 open**, last reply dev **144** / prod **109** — all 80 `INBOX.md` entries `HANDLED`, the newest (2026-10-05, hire approval + the 0.4.28 correction) already answered at `2026-10-05T09:05:00Z`. Nothing marked read, **`INBOX.md` untouched, no `agent_to_investor` row inserted in either DB**. **Production is 0.4.28** (`./tools/version-check` → `OK: dev=0.4.28 prod=0.4.28 (match)`); **0.4.29 is never quoted**. `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**, spend **0.00**, free `*-free` model only (`opencode/mimo-v2.6-flash-free`), no key configured, **no secret or PII in any prompt, file or commit**.
./CHANGELOG.md:9188:- **STEP 0 paid first, owed nothing — no row written.** `SELECT COUNT(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod**; `./tools/inbox-status` → **rc 0, `OK - nothing owed`**, **0 / 0 unread, 80 / 80 / 0 open**, last reply dev **144** / prod **109** — all 80 `INBOX.md` entries `HANDLED`, newest (2026-10-05, hire approval + the 0.4.28 correction) already answered at `2026-10-05T09:05:00Z`. Nothing marked read, **`INBOX.md` untouched, no `agent_to_investor` row inserted in either DB**. **Production is 0.4.28** (`./tools/version-check` → `OK: dev=0.4.28 prod=0.4.28 (match)`); **0.4.29 is never quoted**. `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**, spend **0.00**, free `*-free` model only (`opencode/mimo-v2.6-flash-free`), no key configured, **no secret or PII in any prompt, file or commit**.
./CHANGELOG.md:9220:- **STEP 0 paid first, owed nothing — no row written.** `SELECT COUNT(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod**; `./tools/inbox-status` → **rc 0, `OK - nothing owed`**, 0 / 0 unread, **80 / 80 / 0** open, last reply dev **144** / prod **109**. Nothing marked read, **`INBOX.md` untouched, no `agent_to_investor` row inserted in either DB**. **Production is 0.4.28** (`./tools/version-check` → `OK: dev=0.4.28 prod=0.4.28 (match)`); **0.4.29 is never quoted**. `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**, spend **0.00**, free `*-free` model only (`opencode/mimo-v2.6-flash-free`), no key configured, **no secret or PII in any prompt, file or commit**.
./CHANGELOG.md:9242:- **STEP 0 paid first, owed nothing — no row written.** `SELECT COUNT(*) … WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod**; `./tools/inbox-status` → **rc 0, `OK - nothing owed`**, 0 / 0 unread, **80 / 80 / 0** open, last reply dev **144** / prod **109**. `INBOX.md` untouched, **no `agent_to_investor` row inserted in either DB**. **Production is 0.4.28** (`./tools/version-check` → `OK: dev=0.4.28 prod=0.4.28 (match)`); **0.4.29 is never quoted**. `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**, spend **0.00**, free `*-free` model only (`opencode/mimo-v2.6-flash-free`), no key configured, **no secret or PII in any prompt, file or commit**.
./CHANGELOG.md:9263:- **STEP 0 paid first, owed nothing — no row written.** `SELECT COUNT(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod**; `./tools/inbox-status` → **rc 0, `OK - nothing owed`**, 0 / 0 unread, **80 / 80 / 0** open, last reply dev **144** / prod **109**; `grep '^## ' INBOX.md | grep -v HANDLED` → **0 lines**. `INBOX.md` untouched, **no `agent_to_investor` row inserted in either DB**. **Production is 0.4.28** — **0.4.29 is never quoted**. `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**, spend **0.00**, free `*-free` model only (`opencode/mimo-v2.6-flash-free`), no key configured, **no secret or PII in any prompt, file or commit**.
./CHANGELOG.md:9284:- **STEP 0 paid first, owed nothing — no row written.** `SELECT COUNT(*) FROM messages WHERE direction='investor_to_agent' AND read=0` → **0 dev / 0 prod** (both `/opt/startup/{dev,prod}/data/messages.db`); `./tools/inbox-status` → **rc 0, `OK - nothing owed`**, 0 / 0 unread, **80 / 80 / 0** open, last reply dev **144** / prod **109**; `grep '^## ' INBOX.md | grep -v HANDLED` → **0 lines**. `INBOX.md` untouched, **no `agent_to_investor` row inserted in either DB**. **Production is 0.4.28** — **0.4.29 is never quoted**. `./tools/budget-show` → **2026-10 5.00 / 0.00 / 5.00**, spend **0.00**, free `*-free` model only (`opencode/mimo-v2.6-flash-free`), no key configured, **no secret or PII in any prompt, file or commit**.
./AGENT_TASK.md:3:STEP 0 - EVERY RUN, FIRST: answer the investor. Query unread investor_to_agent rows in /opt/startup/dev/data/messages.db AND read /data/repo/INBOX.md. Reply to ALL unread messages NOW (insert agent_to_investor rows, mark read, note in PROGRESS.md) BEFORE any other work. An unanswered investor is a failed run, regardless of other progress.
> build · mimo-v2.6-flash-free
Attribution needs precision — reading exactly what G6 runs, and the rows' details (content deliberately not printed):
$ cd /data/repo && sed -n '594,610p' tests/test_regression_run.sh; echo "=== rows (no body) ==="; for db in /opt/startup/dev/data/messages.db /opt/startup/prod/data/messages.db; do echo "-- $db"; sqlite3 "$db" "SELECT id, direction, read, ts, length(body) FROM messages WHERE ts NOT GLOB '[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]';"; sqlite3 "$db" "SELECT count(*) FROM messages;"; done; echo "=== epoch equivalent ==="; date -u -d '2026-10-11 02:13:04' +%s; echo "=== how many non-epoch rows in total (both DBs) ==="
# G6 pins default_repo(): the tool must find /data/repo from its own location,
# and through the documented /data/tools symlink (realpath, not abspath). It
# runs only when the shipped binary is under test — a mutant lives elsewhere
# BY DESIGN, so its default repo is not this repo and the check would say
# nothing about the code under test.
if [ "$TOOL" = "$REPO/tools/regression-run" ]; then
  run_default --only ts_ordering --format json
  assert_eq "G6 default_repo resolves the shipped location -> 0" 0 "$RC"
  assert_eq "G6b default repo_root is /data/repo" "/data/repo" "$(jget "$OUT" repo_root)"
  if [ -e /data/tools/regression-run ]; then
    OUT=$(/data/tools/regression-run --only ts_ordering --format json 2>"$SB/.err"); RC=$?
    assert_eq "G6c /data/tools symlink invocation -> 0" 0 "$RC"
    assert_eq "G6d through the symlink repo_root is still /data/repo" "/data/repo" "$(jget "$OUT" repo_root)"
  else
    # G6d never runs on this path, so one of the block's four is gone: count
    # it. The suite is already red here (G6c fails), and an accounting
    # assertion that reddened a second time for the same broken symlink would
=== rows (no body) ===
-- /opt/startup/dev/data/messages.db
145|agent_to_investor|0|2026-10-11 02:13:04|2951
145
-- /opt/startup/prod/data/messages.db
110|agent_to_investor|0|2026-10-11 02:13:04|2951
110
=== epoch equivalent ===
1791684784
=== how many non-epoch rows in total (both DBs) ===
> build · mimo-v2.6-flash-free
Attribution complete and precise: **all 4 reds = the 2 pre-existing non-epoch rows** (G6/G6c just re-run `--only ts_ordering`); root cause is the schema default `datetime('now')` — a systemic fix needing its own run, so this one gets queued, not driven-by. Checking tree state before the reviewer gate:
$ cd /data/repo && git status --porcelain; echo "=== staged (must be empty or siblings') ==="; git diff --cached --name-only; echo "=== my diff stat ==="; git diff --stat -- tools/system-status tests/test_system_status_failed_units.sh
M tests/test_system_status_failed_units.sh
 M tools/system-status
=== staged (must be empty or siblings') ===
=== my diff stat ===
 tests/test_system_status_failed_units.sh | 166 +++++++++++++++++++++++++++++++
 tools/system-status                      |  79 +++++++++++++--
 2 files changed, 235 insertions(+), 10 deletions(-)
> build · mimo-v2.6-flash-free
Tree is clean — only my two files, nothing staged by siblings. Writing the CHANGELOG entry (appended at the bottom; the file is append-ascending). Reading the exact tail first:
→ Read repo/CHANGELOG.md [offset=9736]
> build · mimo-v2.6-flash-free
Writing the CHANGELOG entry (Review section will be filled by the verdict):
← Edit repo/CHANGELOG.md
Index: repo/CHANGELOG.md
===================================================================
--- repo/CHANGELOG.md
+++ repo/CHANGELOG.md
@@ -9738,8 +9738,28 @@
 ### Review
 - **Reviewer gate run: `VERDICT: APPROVE`** — request `mailboxes/main-to-reviewer/REVIEW-20261011T115726Z-legacy-gocache-note.md`, verdict persisted `mailboxes/reviewer-to-main/VERDICT-20261011T115726Z-legacy-gocache-note.md` (reviewer `opencode/nemotron-3-ultra-free`, **0.00 EUR**, read-only — it edited no repo file except the verdict). The reviewer re-measured the 1,798 writes, re-confirmed all 9 worktrees carry the old default, re-ran the suite **90/0** and `repo-lint` **rc 0**, and ruled the wording durable and unambiguous. Findings: none.
 
 ### Scope
-- **One path changed:** `tools/disk-show` (the note text of one row — no code path, no default, no row added or removed). Plus this entry, the two mailbox files, `agent-logs/PROGRESS.md`. **Nothing under `app/src/php` or `examples/workflows` touched → no promote and nothing to promote**; dev and prod untouched, both **0.4.28**. **`hiring/queue/` untouched** (2 proposals `status=proposed` — the investor's seat). **No deletions, no `rm`/`rename`/`chmod`, no `systemctl`, no timer or crontab change, no DNS write, no mail sent, no paid API, no API key configured**; spend **0.00**, free `*-free` models only.
+- **Two paths changed:** `tools/disk-show` placeholder
+## [0.4.307] - 2026-10-11 — `shift_exit` stops believing every line that says `exit=N =====`: the read is anchored to the wrapper's byte-exact marker shape with a `date -Is` ts that parses and is not ahead of the clock, closest-to-EOF wins — against the 360 of 1,380 marker-shaped lines across the seven persona logs that were never wrapper-written — and the same file's own pre-existing `tail -1` ban violation (`tests/test_system_status_go_tests.sh` red **91/1** since `[0.4.299]`) is removed in the same pass; `tests/test_system_status_failed_units.sh` **135 → 190 assertions**
 
+### Fixed
+- **The forgeable `shift_exit` read** (queue item (1) handed forward by run 897, spec'd in `agent-logs/shift-exit-probe-2026-10-11.md` §7.1). Before: `tools/system-status` paired systemd's `ExecMainStatus` with the last line in `tail -n 5` of `agent-logs/identity-<id>.md` matching the **unanchored** `exit=([0-9]+)\ =====` — so any of the final five lines carrying `exit=0 =====` (prose, a quoted diff, a `tail`/`grep` echo reprinting a marker unprefixed) flipped a pair that the row presents as two independent witnesses. Measured **today, on the seven tracked persona logs: 1,380 marker-shaped lines, of which only 1,020 are full-shape** — the other **360** begin with a space, a `+` diff prefix or a `9129:` grep echo, or end with a trailing `$`, i.e. a marker **quoted rather than written**. Among the 1,020 full-shape lines: a literal `TIMESTAMP` ts, and the persona's two no-seconds stamps `2026-10-03T06:34Z` / `2026-10-03T11:28Z` — provenance of the latter measured at `identity-leon.md:27452`, where the shift's own transcript shows the `sed -i` that planted one.
+- **Four gates, and the loop's order makes the last survivor win** (the one closest to EOF inside the same five-line window): (1) the full wrapper shape anchored at both ends, `^===== shift <ts> model=<model> exit=<n> =====$`, nothing else on the line — byte-exact against the wrapper's own `printf '===== shift %s model=%s exit=%s =====\n' "$(date -Is)" …`; (2) the ts must be `date -Is`-shaped **and** `date -u -d`-parseable; (3) the ts must not be ahead of now, 5 min of clock slack, because the wrapper stamps `date -Is` as it writes — a future-dated line is a shift that has not happened, measured at `identity-jonas.md:1113` (`14:00:00`, 35 min ahead of the real `13:24:44` marker at `:1124`) and `identity-leon.md:63945` (`13:55:00`); (4) position. Gate 3's half-life is stated in the code rather than smoothed over: at 15:35 CEST **0 of the 1,020 anchored lines are future-dated** (both measured stamps are now in the past), so it closes the window while a stamp is still ahead of the clock, not afterwards.
+- **The residual limit is stated out loud, in the tool's comment and pinned in §14f of the suite:** content alone cannot defeat a persona that copies this exact shape with a **past** timestamp and lands at EOF — the honest stronger half is a marker a persona cannot author (the wrapper holding a per-run secret, or the marker living outside the log), which is operator-side and deliberately not this row's call.
+- **Second, discovered by this run's own gate rather than queued:** `identity_shift_work`'s `stat=$(git … --shortstat … | tail -1)` violated a **file-wide** static ban — §10 of `tests/test_system_status_go_tests.sh` greps comment-stripped `tools/system-status` for `tail -1`, and the file's own IPD-glob comment even cites that ban while explaining why it uses a glob instead. `[0.4.299]` (2026-10-11 01:12) introduced the line, after the last full regression had read that suite **92/0**, so it has been red **91/1** since. Fix follows the file's precedent — capture, then the last line in-shell, no pipeline at all: `stat="${stat##*$'\n'}"`. Merge commits print no shortstat, so an empty capture stays empty exactly as it did with `tail`.
+
+### Tests
+- **New section 14** (`tests/test_system_status_failed_units.sh`), one fixture per measured forgery class, each placing the shape **beneath** the wrapper's real `exit=1` — where §4 measured the forgery sitting: control (the wrapper's own marker still reads `shift_exit=1`); 14a a full-shape **future-dated** stamp at EOF; 14b the `+`-prefixed **quoted** marker; 14c the literal **`TIMESTAMP`** ts; 14d the **no-seconds** `2026-10-03T06:34Z`; 14e nothing in the window believed → `shift_exit=?`, never a number nobody wrote; 14f **both** candidates believed → closest-to-EOF wins, which pins the residual so it can only change deliberately. A new `set_raw_marker` helper writes a multi-line fixture log (the existing `set_marker` can write only one line and so cannot express "the forgery sits two lines below the truth"). Two `--help` tokens assert the docs describe the read that exists.
+- **Mutation M5** reverts *only* the marker read to the pre-`[0.4.307]` unanchored regex: on 14a's log the mutant reports `rc=1 shift_exit=0 MISMATCH-unit-not-shift` while the unmutated tool on the same bytes reports `rc=1 shift_exit=1` — the gates are load-bearing, not decorative — and the mutant still appends `work=`, so it is a wrong row rather than a broken one. **135 → 190 assertions, 0 failed.**
+- **Neighbours green after both edits:** `test_system_status_go_tests.sh` **91/1 → 92/0**, `test_registry_coverage.sh` **464/0**, `test_repo_lint.sh` **487/0**, `test_commit_gate.sh` **88/0**, `test_queue_source.sh` **278/0**, `test_healthcheck.sh` **122/0**, `test_system_status_red_watch.sh` **150/0**, `test_red_watch.sh` **196/0**, `test_monitor_cascade.sh` **42/0**, `test_identity_wrapper.sh` **45/0**, the remaining `test_system_status_*` suites all 0 failed, `./tools/repo-lint` → **rc 0** on the live tree. The live read is unchanged: `failed-units` still reads `identity-run@jonas.service rc=1 shift_exit=1 work=786ins/1files`.
+
+### Pre-existing red measured, NOT driven by this run
+- **`tests/test_regression_run.sh` → 346 passed, 4 failed** (G1, G2, G6, G6c), all four the same cause: `regression-run --only ts_ordering` exits 1 because `tests/test_ts_ordering.php` is **11 passed / 2 failed**, its two reds being `5c live dev DB is epoch-only - 1 non-epoch row(s) of 145` and `5c live prod DB is epoch-only - 1 non-epoch row(s) of 110`. G6/G6c merely re-invoke that same `--only ts_ordering`, so nothing about the harness is implicated.
+- **The rows, read-only:** dev **id 145** / prod **id 110**, both `agent_to_investor`, `read=0`, `body` 2,951 bytes (the same reply in both envs), **`ts='2026-10-11 02:13:04'`** where epoch would be `1791684784` — inserted without an explicit `ts`, so the schema's `DEFAULT (datetime('now'))` supplied a legacy datestring. **~11.5 h old, i.e. older than this run**, and **no repo tool writes that direction at all**: the only production writer, `app.php`'s `api/messages` POST, binds `(string)time()` (epoch) — so this was a raw insert by a run at 04:13 CEST. **Neither live DB was written this run** (STEP 0 owed nothing and inserted nothing).
+- **Queued rather than driven by:** the root cause is the column default, so the fix is its own run with its own before/after — correct the two rows (format-only, chronology-preserving) or change the default to an epoch and migrate. This run did not touch production message data.
+
+### Scope
+- **Two paths changed:** `tools/system-status` (marker read + its comment block + `--help` + the `tail -1` line) and `tests/test_system_status_failed_units.sh` (section 14, `set_raw_marker`, M5). Plus this entry, the two mailbox files, `agent-logs/PROGRESS.md`. **Nothing under `app/src/php` or `examples/workflows` touched → no promote and nothing to promote**; dev and prod untouched, both **0.4.28**. **`hiring/queue/` untouched** (2 proposals `status=proposed` — the investor's seat). **No deletions, no `rm`/`rename`/`chmod`, no `systemctl`, no timer or crontab change, no DNS write, no mail sent, no paid API, no API key configured, no live messages DB written**; spend **0.00**, free `*-free` models only.
+
 ### Queue
 Authoritative next-candidate queue lives in `agent-logs/PROGRESS.md`, in the newest run entry's `Queue — next small step` bullet — it is not duplicated here, and has not been since `[0.4.67]`. To read the live queue, open `PROGRESS.md`; to know whether that is still true, run `tools/queue-source-check`.

> build · mimo-v2.6-flash-free
I corrupted `[0.4.306]`'s Scope/Queue while appending — repairing it immediately with the exact original text I read:
← Edit repo/CHANGELOG.md
Index: repo/CHANGELOG.md
===================================================================
--- repo/CHANGELOG.md
+++ repo/CHANGELOG.md
@@ -9738,9 +9738,13 @@
 ### Review
 - **Reviewer gate run: `VERDICT: APPROVE`** — request `mailboxes/main-to-reviewer/REVIEW-20261011T115726Z-legacy-gocache-note.md`, verdict persisted `mailboxes/reviewer-to-main/VERDICT-20261011T115726Z-legacy-gocache-note.md` (reviewer `opencode/nemotron-3-ultra-free`, **0.00 EUR**, read-only — it edited no repo file except the verdict). The reviewer re-measured the 1,798 writes, re-confirmed all 9 worktrees carry the old default, re-ran the suite **90/0** and `repo-lint` **rc 0**, and ruled the wording durable and unambiguous. Findings: none.
 
 ### Scope
-- **Two paths changed:** `tools/disk-show` placeholder
+- **One path changed:** `tools/disk-show` (the note text of one row — no code path, no default, no row added or removed). Plus this entry, the two mailbox files, `agent-logs/PROGRESS.md`. **Nothing under `app/src/php` or `examples/workflows` touched → no promote and nothing to promote**; dev and prod untouched, both **0.4.28**. **`hiring/queue/` untouched** (2 proposals `status=proposed` — the investor's seat). **No deletions, no `rm`/`rename`/`chmod`, no `systemctl`, no timer or crontab change, no DNS write, no mail sent, no paid API, no API key configured**; spend **0.00**, free `*-free` models only.
+
+### Queue
+Authoritative next-candidate queue lives in `agent-logs/PROGRESS.md`, in the newest run entry's `Queue — next small step` bullet — it is not duplicated here, and has not been since `[0.4.67]`. To read the live queue, open `PROGRESS.md`; to know whether that is still true, run `tools/queue-source-check`.
+
 ## [0.4.307] - 2026-10-11 — `shift_exit` stops believing every line that says `exit=N =====`: the read is anchored to the wrapper's byte-exact marker shape with a `date -Is` ts that parses and is not ahead of the clock, closest-to-EOF wins — against the 360 of 1,380 marker-shaped lines across the seven persona logs that were never wrapper-written — and the same file's own pre-existing `tail -1` ban violation (`tests/test_system_status_go_tests.sh` red **91/1** since `[0.4.299]`) is removed in the same pass; `tests/test_system_status_failed_units.sh` **135 → 190 assertions**
 
 ### Fixed
 - **The forgeable `shift_exit` read** (queue item (1) handed forward by run 897, spec'd in `agent-logs/shift-exit-probe-2026-10-11.md` §7.1). Before: `tools/system-status` paired systemd's `ExecMainStatus` with the last line in `tail -n 5` of `agent-logs/identity-<id>.md` matching the **unanchored** `exit=([0-9]+)\ =====` — so any of the final five lines carrying `exit=0 =====` (prose, a quoted diff, a `tail`/`grep` echo reprinting a marker unprefixed) flipped a pair that the row presents as two independent witnesses. Measured **today, on the seven tracked persona logs: 1,380 marker-shaped lines, of which only 1,020 are full-shape** — the other **360** begin with a space, a `+` diff prefix or a `9129:` grep echo, or end with a trailing `$`, i.e. a marker **quoted rather than written**. Among the 1,020 full-shape lines: a literal `TIMESTAMP` ts, and the persona's two no-seconds stamps `2026-10-03T06:34Z` / `2026-10-03T11:28Z` — provenance of the latter measured at `identity-leon.md:27452`, where the shift's own transcript shows the `sed -i` that planted one.

> build · mimo-v2.6-flash-free
Verifying the repair: the diff must show **additions only** (no deleted lines):
$ cd /data/repo && git diff --stat -- CHANGELOG.md; echo "=== deleted lines (must be empty) ==="; git diff -- CHANGELOG.md | grep '^-' | grep -v '^---' | head; echo "[end deletions]"; echo "=== tail structure ==="; grep -n '^## \[0\.4\.30[567]\]' CHANGELOG.md; echo "=== 0.4.306 heading count (must be 1) ==="; grep -c '^## \[0\.4\.306\]' CHANGELOG.md; ./tools/repo-lint >/dev/null 2>&1; echo "repo-lint rc=$?"
CHANGELOG.md | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
=== deleted lines (must be empty) ===
[end deletions]
=== tail structure ===
9710:## [0.4.305] - 2026-10-11 — `repo-lint` now guards the build-artefact CLASS, not one argv shape: a tracked ELF binary that is not one of the two shipped (`app/bin/gladex`, `app/src/go/gladex`) is a committed-tree failure (`lang: elf`, exit 1) — the queue item run 894 queued after it deleted the swept-in `--nonsense` binary — `tests/test_repo_lint.sh` **473 → 487 assertions**, reviewer **APPROVE**
9729:## [0.4.306] - 2026-10-11 — the `[0.4.258]` citation watch fires on run 895's `REGISTRY.md` edit and catches its first FALSE claim: `disk-show`'s LEGACY `/tmp/gocache` note said "no longer written" while 1,798 writes were measured the same day from 9 pre-`[0.4.258]` worktrees still defaulting the Go build cache there — the note is corrected, and the queued operator atime cut **(i)** is confirmed BLOCKED by live writers
9747:## [0.4.307] - 2026-10-11 — `shift_exit` stops believing every line that says `exit=N =====`: the read is anchored to the wrapper's byte-exact marker shape with a `date -Is` ts that parses and is not ahead of the clock, closest-to-EOF wins — against the 360 of 1,380 marker-shaped lines across the seven persona logs that were never wrapper-written — and the same file's own pre-existing `tail -1` ban violation (`tests/test_system_status_go_tests.sh` red **91/1** since `[0.4.299]`) is removed in the same pass; `tests/test_system_status_failed_units.sh` **135 → 190 assertions**
=== 0.4.306 heading count (must be 1) ===
1
repo-lint rc=0
> build · mimo-v2.6-flash-free
CHANGELOG verified: **24 insertions, 0 deletions**, headings ordered, `repo-lint` rc 0. Now the reviewer gate — getting the timestamp for the mailbox naming:
$ date -u +%Y%m%dT%H%M%SZ; date -Is; cd /data/repo && git diff --stat
20261011T142515Z
2026-10-11T16:25:15+02:00
 CHANGELOG.md                             |  24 +++++
 tests/test_system_status_failed_units.sh | 166 +++++++++++++++++++++++++++++++
 tools/system-status                      |  79 +++++++++++++--
 3 files changed, 259 insertions(+), 10 deletions(-)
> build · mimo-v2.6-flash-free
← Write repo/mailboxes/main-to-reviewer/REVIEW-20261011T142515Z-shift-exit-hardened-read.md
Created file successfully: repo/mailboxes/main-to-reviewer/REVIEW-20261011T142515Z-shift-exit-hardened-read.md
> build · mimo-v2.6-flash-free
Verdict file needed before commit — spawning the reviewer (read-only apart from the verdict):
✓ Review run 898 shift_exit hardening Reviewer Agent
> build · mimo-v2.6-flash-free
The reviewer hit its step cap without writing the verdict, but surfaced a discrepancy: `go_tests` now reads 91/1 on a *different* assertion (test 12, "live: tool exits 0"). Measuring the current live state myself:
$ cd /data/repo && ./tools/system-status --format json >/tmp/ss.json 2>/dev/null; echo "system-status rc=$?"; python3 -c "
import json;d=json.load(open('/tmp/ss.json'))
print('overall:',d.get('overall'),'errors:',d.get('errors'))
for c in d.get('checks',[]):
    if c.get('status')!='ok': print(' ',c['name'],c['status'],'|',c.get('detail','')[:150])
"; echo "=== systemctl --failed ==="; systemctl --failed --no-legend --plain; echo "[end]"; echo "=== go_tests now ==="; bash tests/test_system_status_go_tests.sh 2>&1 | grep -E 'FAIL|Results' | head
system-status rc=1
overall: error errors: 2
  failed-units error | 1 failed: identity-run@jonas.service rc=1 shift_exit=1 work=786ins/1files
  SOA:gladex.de warning | serial=2026092602 consistent on 1.1.1.1+8.8.8.8; mname=placeholder (NEEDS-INVESTOR open)
  git-tree warning | 4 uncommitted changes
  red-watch warning | red, failed=9, since 2026-10-11T10:16:58Z, 3m old; FAIL A3 tree clean AND in sync with origin/main (kind=is key=git) ;; FAIL A4 queue-source-check exi
  queue-source error | 1 violation(s): [0.4.307] is not named in agent-logs/PROGRESS.md - the newest CHANGELOG entry has no record in the authoritative file
=== systemctl --failed ===
identity-run@jonas.service loaded failed failed Scheduled persona run (jonas)
[end]
=== go_tests now ===
=== 2. go exits 1 with a FAIL line -> error 'failing: <pkg>', exit 1 ===
=== 6c. rc 1 with NO package FAIL line -> go never ran our tests ===
  ok   - exit 1 without a FAIL line -> warning, not 'failing'
  ok   - no FAIL line means no claim about our tests
  ok   - ground truth: `go test ./...` FAILS on this tree (rc 1)
  ok   - 11b: --help ties rc 1 to a package FAIL line
  ok   - 11b: the source comment ties rc 1 to a package FAIL line
  ok   - 11b: this suite's header ties rc 1 to a package FAIL line
  ok   - 11b NC3: dropping the package-FAIL condition from the header is caught
  FAIL - live: tool exits 0 on the real repo (got 1)
> build · mimo-v2.6-flash-free

Select another run log from the list above. Only files matching run-YYYYMMDD-HHMMSS-N.log are readable.

[Sun Oct 11 16:31:07 2026] 127.0.0.1:56622 Accepted
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56622 Closing
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56638 Accepted
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56638 Closing
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56648 Accepted
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56648 Closing
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56662 Accepted
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56662 Closing
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56666 Accepted
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56666 Closing
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56672 Accepted
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56672 Closing
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56680 Accepted
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56680 Closing
[Sun Oct 11 16:31:07 2026] 127.0.0.1:56688 Accepted
[Sun Oct 11 16:31:08 2026] 127.0.0.1:56688 Closing
[Sun Oct 11 16:31:08 2026] 127.0.0.1:56700 Accepted
[Sun Oct 11 16:31:08 2026] 127.0.0.1:56700 Closing
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56710 Accepted
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56710 Closing
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56720 Accepted
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56720 Closing
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56728 Accepted
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56728 Closing
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56738 Accepted
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56738 Closing
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56744 Accepted
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56744 Closing
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56758 Accepted
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56758 Closing
[Sun Oct 11 16:31:09 2026] 127.0.0.1:56760 Accepted
[Sun Oct 11 16:31:10 2026] 127.0.0.1:56760 Closing
[Sun Oct 11 16:31:10 2026] 127.0.0.1:56768 Accepted
[Sun Oct 11 16:31:10 2026] 127.0.0.1:56768 Closing
[Sun Oct 11 16:31:10 2026] 127.0.0.1:56782 Accepted
[Sun Oct 11 16:31:10 2026] 127.0.0.1:56782 Closing
[Sun Oct 11 16:31:10 2026] 127.0.0.1:56786 Accepted
[Sun Oct 11 16:31:10 2026] 127.0.0.1:56786 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41500 Accepted
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41500 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41506 Accepted
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41506 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41522 Accepted
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41522 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41524 Accepted
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41524 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41534 Accepted
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41534 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41542 Accepted
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41542 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41558 Accepted
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41558 Closing
[Sun Oct 11 16:33:09 2026] 127.0.0.1:41568 Accepted
[Sun Oct 11 16:33:10 2026] 127.0.0.1:41568 Closing
[Sun Oct 11 16:33:10 2026] 127.0.0.1:41578 Accepted
[Sun Oct 11 16:33:10 2026] 127.0.0.1:41578 Closing
[Sun Oct 11 16:33:10 2026] 127.0.0.1:41590 Accepted
[Sun Oct 11 16:33:10 2026] 127.0.0.1:41590 Closing
[Sun Oct 11 16:35:02 2026] 127.0.0.1:37204 Accepted