The operator journal is a deliverable. Nothing asserted it, and three defects lived there.
ABORT BREADCRUMB. `awaitAbortInFlightTaskWork` wrote `Pause abort marked` before inspecting
any surface, so a card with no session still announced an interruption: every newly created
task logged `provenance=hard-cancel` a second after creation, because creation moves the card
out of the planning lane and that move is user-sourced. Nothing was interrupted and the
operator withdrew nothing — false on both counts, and the second time this label has lied.
The in-memory marker is still claimed synchronously, before any await, because the
graph-failure classifiers depend on it; only the operator-facing line waits for evidence.
DUPLICATE APPROVAL. Landing requires TWO consecutive clean approvals of the same candidate.
Both wrote the identical sentence with the identical SHA, so a safety feature read as a
duplicated invocation and was reported as an anomaly. The line now carries its pass number.
DEAD RECOVERY. That same line is a contract: SelfHealingManager parses it with
`/AI merge review \(pass \d+\): approved …/` to recover approved SHAs. No emitter ever wrote
the parenthetical, so the parser matched nothing, `hasApprovedAiMergeReview` always answered
false, and the recovery it guards could not run. Two sides individually reasonable, coupled
through a log line nobody compared — the same shape as every other defect in this series.
Emitter and parser now agree, and a test pins them against each other so a one-sided edit
fails instead of silently killing the path again.
COVERAGE. New pipeline-smoke scenario S20 drives a task to merge on all three coding built-ins
and asserts the journal an operator actually reads: no abort claimed on an uninterrupted card,
no line written twice in a row, no approval whose own text says it verified nothing. It
reproduced the duplicate deterministically on its first run, which is the point — every
anomaly reported this week was plainly visible in that journal and invisible to this lane.
pnpm lint 0 errors, test:gate green, engine typecheck clean, pipeline-smoke 93/93.