From 2dae30e1a6330a2dfbf2e3a83e74e6dcb2d66e73 Mon Sep 17 00:00:00 2001
From: wusumac <736139669@qq.com>
Date: Thu, 13 Aug 2026 17:16:58 +0800
Subject: [PATCH] chore(pmo): prepare atomicity review r3

---
 .agent-taskgraph/ROLES.md                     |   4 +-
 .agent-taskgraph/STATUS.md                    |   6 +-
 ...G-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.json | 104 ++++++++++++++++++
 .../context.md                                |   0
 .../dispatch.md                               |   0
 .../goal.md                                   |   8 ++
 .../ledger.md                                 |  13 ++-
 .../report.md                                 |  12 ++
 .../runtime-evidence.json                     |   0
 .../task-manifest.json                        |   0
 .../context.md                                |  29 +++++
 .../dispatch.md                               |  21 ++++
 .../goal.md                                   |  84 ++++++++++++++
 .../ledger.md                                 |  45 ++++++++
 .../task-manifest.json                        | 104 ++++++++++++++++++
 .../ROLE.md                                   |   9 +-
 .../ROLE.md                                   |  22 ++++
 ...ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.md |  17 +++
 18 files changed, 464 insertions(+), 14 deletions(-)
 create mode 100644 .agent-taskgraph/manifests/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.json
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/context.md (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/dispatch.md (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md (91%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/ledger.md (78%)
 create mode 100644 .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/report.md
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/runtime-evidence.json (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/task-manifest.json (100%)
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/context.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/dispatch.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/goal.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/ledger.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/task-manifest.json
 create mode 100644 .agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r3/ROLE.md
 create mode 100644 .agent-taskgraph/staffing/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.md

diff --git a/.agent-taskgraph/ROLES.md b/.agent-taskgraph/ROLES.md
index d1a665a3..c6d74c41 100644
--- a/.agent-taskgraph/ROLES.md
+++ b/.agent-taskgraph/ROLES.md
@@ -18,7 +18,8 @@
 | p91-foundation-reviewer-r4 | P9.1 Foundation Bash 复审 | task-scoped | retired | 固定 bd505d6 从零复审，使用预检后的 bash harness | none | none | 2026-08-13 |
 | p91-foundation-reviewer-r5 | P9.1 Foundation no-rm 复审 | task-scoped | retired | 固定 bd505d6 从零复审，使用执行控制允许的 find-delete Bash harness | none | none | 2026-08-13 |
 | p91-foundation-atomicity-reviewer-r1 | P9.1 Foundation atomicity 独立审查 | task-scoped | retired | 固定 f9b1b22 从零验证 revision 原子性、回归和呈现等价 | none | none | 2026-08-13 |
-| p91-foundation-atomicity-reviewer-r2 | P9.1 Foundation atomicity 权威映射复审 | task-scoped | assigned | 固定 f9b1b22，从 hash-fixed summary 逐行解析 12/10 mode 后完整复审 | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 | 47752063-6c74-403b-8f88-22174953f8af | 2026-08-13 |
+| p91-foundation-atomicity-reviewer-r2 | P9.1 Foundation atomicity 权威映射复审 | task-scoped | retired | 固定 f9b1b22，从 hash-fixed summary 逐行解析 12/10 mode 后完整复审 | none | none | 2026-08-13 |
+| p91-foundation-atomicity-reviewer-r3 | P9.1 Foundation atomicity 工具表复审 | task-scoped | reserved | 固定 f9b1b22；先验证 macOS 工具绝对路径，再按权威逐行 mode 完整复审 | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 | PENDING | 2026-08-13 |
 | p91-h5-publisher | P9.1 H5 发布员 | task-scoped | available | 固定源 Web 导出与 Gallery 发布 | PENDING | PENDING | 2026-08-13 |
 
 ## 编制变更历史
@@ -34,3 +35,4 @@
 | 2026-08-13 | rev-p9.1-1 | Foundation -> atomicity successor H1 | R5 product FAIL after the original Goal's second candidate | Reuse persistent Foundation role; own only revision atomicity + focused regression; downstream remains frozen |
 | 2026-08-13 | rev-p9.1-1 | 新增 H1 independent reviewer | H1 developer candidate f9b1b22 clean/upstream | Fresh task-scoped reviewer; fixed source; no repository writes; deterministic fixed-60 normal-render harness |
 | 2026-08-13 | rev-p9.1-1 | Atomicity reviewer R1 -> R2 contract recovery | R1 atomicity PASS but PMO Goal 14/8 contradicted immutable 12/10 authority | R2 parses each mode/script row from authority SHA 3de791bb; fixed source and writes remain unchanged |
+| 2026-08-13 | rev-p9.1-1 | Atomicity reviewer R2 -> R3 tool-path recovery | R2 stopped before preflight because /usr/bin/mkdir is absent | R3 prevalidates a fixed macOS executable table, then uses the same fixed source and authority-derived modes |
diff --git a/.agent-taskgraph/STATUS.md b/.agent-taskgraph/STATUS.md
index 62d80ea4..f491093e 100644
--- a/.agent-taskgraph/STATUS.md
+++ b/.agent-taskgraph/STATUS.md
@@ -5,13 +5,13 @@
 
 | ABG-P9.1-FOUNDATION-ATOMICITY-H1 | Repair Foundation successful-command revision atomicity | active | p91-runtime-foundation-developer | 1 | 2026-08-13T07:24:00Z | f9b1b22 candidate ready; independent review pending |
 
-| ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 | Independently re-review Foundation atomicity with authority-derived modes | active | p91-foundation-atomicity-reviewer-r2 | 1 | 2026-08-13T08:55:28Z | exact identity ACK verified; fixed-source review active |
+| ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 | Independently review Foundation atomicity after tool-table preflight | inbox | p91-foundation-atomicity-reviewer-r3 | 1 | now | preparing 0/1: session not created |
 
 ## 当前批次总结
 
 - 批次：`abg-p9-1-continuous-development-01`。
 - 已完成：三份专家规格已推送；PMO 当前冻结 authority 为 `p9.1-contract-r2`（权威 22-test baseline）。
 - 视觉切片：candidate `0c640eb` 已作为 `71b7f71` 集成；六帧 844x390，付费使用 0/4、USD 0/5，Owner visual gate 仍开放。
-- 当前 Gate：H1 candidate `f9b1b22`; R1 atomicity matrix PASS but review INVALID because PMO Goal mode split was 14/8 instead of immutable 12/10; fresh R2 preparing, downstream frozen.
-- PMO 监控循环：`RUNNING`，目标 HAPI `47752063-6c74-403b-8f88-22174953f8af`，间隔 600 秒；wait=真实 timer/observe cell，observe=`inspect_peer` + ledger。
+- 当前 Gate：H1 candidate `f9b1b22`; R2 stopped before candidate execution because `/usr/bin/mkdir` is absent; fresh R3 tool-table preflight preparing, downstream frozen.
+- PMO 监控循环：`EXITED`，原因：R2 legal INVALID terminal observed；R3 激活后重新登记 600 秒循环。
 - 结束 Gate：独立 reviewer PASS 后发布新 H5，Owner 再判断理解、乐趣和继续意愿。
diff --git a/.agent-taskgraph/manifests/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.json b/.agent-taskgraph/manifests/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.json
new file mode 100644
index 00000000..4ae13464
--- /dev/null
+++ b/.agent-taskgraph/manifests/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.json
@@ -0,0 +1,104 @@
+{
+  "task_id": "ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3",
+  "title": "Independently review Foundation atomicity after tool-table preflight",
+  "stage": "foundation-atomicity-independent-rereview-r3",
+  "baseline": "25c985395f720ac294718d60608415378bd59068",
+  "branch": "review/abg-p91-foundation-atomicity-r3",
+  "worktree": "/Users/wusumac/Documents/game/tmp/aetherbound-guild-worktrees/p91-foundation-atomicity-review-r3",
+  "frozen_spec": ".agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2",
+  "graph_node": ".agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1",
+  "context_revision": "p91-foundation-atomicity-review-r3",
+  "context_mode": "deep",
+  "context_items": [
+    {
+      "path": "AGENTS.md",
+      "revision": "f9b1b22",
+      "reason": "fixed-reviewer and evidence boundaries"
+    },
+    {
+      "path": ".agent-taskgraph/PROJECT.md",
+      "revision": "P9.1 profile",
+      "reason": "visible HAPI reviewer runtime and downstream freeze"
+    },
+    {
+      "path": ".agent-taskgraph/spec.md",
+      "revision": "p9.1-spec-r2",
+      "reason": "frozen P9.1 scope"
+    },
+    {
+      "path": "docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md",
+      "revision": "p9.1-contract-r2",
+      "reason": "atomic revision, exact-ID and 22-script authority"
+    },
+    {
+      "path": ".agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md",
+      "revision": "terminal ae6045c5",
+      "reason": "product defect that H1 must close"
+    },
+    {
+      "path": ".agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R1/report.md",
+      "revision": "terminal d7d02847",
+      "reason": "atomicity passed but incorrect PMO mode split invalidated final judgment"
+    },
+    {
+      "path": ".agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/report.md",
+      "revision": "terminal a5a70679",
+      "reason": "tool-path INVALID that R3 must not repeat"
+    },
+    {
+      "path": "/private/tmp/abg-p9-0r10-regression-r2.4fxrTu/summary.txt",
+      "revision": "sha256 3de791bb6da14be19d97c194368cd14bc8bfb906013470e81b6e12da83736bf7",
+      "reason": "parse every accepted mode/script row directly; 12 headless and 10 normal"
+    }
+  ],
+  "role_id": "p91-foundation-atomicity-reviewer-r3",
+  "role_lifecycle": "task-scoped",
+  "role_responsibility": "Independently verify immutable f9b1b22 after proving the fixed macOS executable table and authority-derived execution map",
+  "role_continuity": "fresh tool-path recovery after R2 INVALID; no prior reviewer execution evidence reuse",
+  "runtime_requested": {
+    "runtime": "hapi",
+    "flavor": "codex",
+    "model": "gpt-5.6-sol",
+    "effort": "xhigh",
+    "permission": "yolo",
+    "visibility": "visible"
+  },
+  "objective": "Review immutable f9b1b22 from zero. Before creating any reviewer-owned directory or running Godot, verify that every fixed executable exists and is executable: /bin/bash, /bin/mkdir, /usr/bin/find, /usr/bin/git, /usr/bin/shasum, /usr/bin/awk, /usr/bin/sed, /usr/bin/sort, /usr/bin/xargs, /bin/ps, /usr/bin/pgrep, /usr/bin/mktemp and /bin/cp. Then use Bash 3-compatible syntax only, never rm/unlink, and pass the guarded find-delete no-Godot preflight. Fresh archive/import and independently verify the complete public-command atomicity matrix, exact Guild IDs and legacy rejection. Copy the immutable accepted summary, require SHA-256 3de791bb..., and build the 22-script execution list by parsing each row's first token as mode and second token as script; verify exactly 12 headless and 10 normal. Apply --fixed-fps 60 to every parsed normal row. Fresh-capture rejected baseline bd505d6 and repaired candidate f9b1b22, four groups and 30 frames each, and require identical inventory and PNG bytes. Report PASS, product FAIL or harness INVALID at the earliest boundary; never repair.",
+  "needs": [
+    "p91_foundation_atomicity_h1 candidate f9b1b22"
+  ],
+  "consumes": [
+    "f9b1b22 fixed source",
+    "R5 FAIL ae6045c5",
+    "R1 INVALID d7d02847",
+    "R2 INVALID a5a70679",
+    "hash-fixed accepted summary 3de791bb"
+  ],
+  "produces": [
+    "fresh read-only PASS, FAIL or INVALID terminal with reviewer-owned sanitized evidence"
+  ],
+  "writes": [
+    "none in repository; reviewer-owned isolated temporary evidence only"
+  ],
+  "pass_route": "p91_domain_implementation",
+  "fail_route": "failed",
+  "max_attempts": 1,
+  "acceptance": [
+    "[ ] Before mkdir/mktemp/Godot, prove all 13 fixed executable paths exist and are executable; stop INVALID on the first missing tool",
+    "[ ] Pass Bash3-compatible no-Godot preflight: false rc=1, guarded absolute /private/tmp root and direct /usr/bin/find -depth -delete; no rm/unlink",
+    "[ ] Prove fixed f9b1b22, parent cf8d670, rejected ancestor bd505d6, exactly three authorized candidate paths, clean worktrees and fresh archives",
+    "[ ] Independently enumerate and verify every public mutator across success and rejection branches with complete internal-state fingerprints, exact Guild IDs and zero legacy leak",
+    "[ ] Verify accepted summary SHA 3de791bb; parse all 22 mode/script rows directly; derive exactly 12 headless/10 normal; every normal row uses --fixed-fps 60",
+    "[ ] Require every parsed script exit 0, emit its authority marker exactly once and strict diagnostics zero",
+    "[ ] Fresh-capture bd505d6 and f9b1b22 four groups/30 frames each; inventories and PNG bytes identical; sanitize/hash retained evidence and guarded cleanup"
+  ],
+  "frozen": [
+    "Do not edit, repair, stage, commit, push, merge or modify repository files or refs",
+    "Do not reuse developer, R1, R2 or prior Foundation reviewer execution logs/captures as R3 execution evidence",
+    "Do not hand-author or infer a separate 22-script mode map; execution order and mode must come from the hash-fixed summary rows",
+    "Do not invoke rm, unlink, zsh wrappers, mapfile, or variables named status/path; use /bin/bash, Bash 3 syntax, rc/review_root and guarded direct find-delete",
+    "Do not expose credentials, foreign process argv or machine-wide environment; retain only sanitized reviewer-owned facts and hashes",
+    "Do not implement downstream work, generate media, package, sign, upload, publish or cross Human Gates; harness failures are INVALID"
+  ],
+  "estimate": "tool and source preflight 15m; independent atomicity matrix 30-60m; authority-parsed 22 scripts 30-60m; two-source 30-frame capture 45-90m; confidence high"
+}
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/context.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/context.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/context.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/context.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/dispatch.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/dispatch.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/dispatch.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/dispatch.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md
similarity index 91%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md
index a02151e8..ec61e005 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md
@@ -71,3 +71,11 @@ preflight/source/scope 15m; independent atomicity matrix 30-60m; authority-parse
 
 - graph 节点约定的 produces
 - 验收证据与残余风险
+
+## Review Terminal
+
+- `ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 INVALID: Bash preflight setup`.
+- Fixed candidate: `f9b1b22a51257126193535c7dc22dfabd47d9dbc`.
+- Earliest boundary: reviewer invoked nonexistent `/usr/bin/mkdir` before the no-Godot preflight could create its directory.
+- Godot invocations: `0`; candidate execution not started; repository edits none; R1 execution evidence not reused.
+- Evidence: `/private/tmp/abg-p91-foundation-atomicity-r2.MpiPpo/terminal.txt`, SHA-256 `a5a70679ad08c50d6e2d1cfe791be9fbd8f46c21d5135c1660edaf4a3f790784`.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/ledger.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/ledger.md
similarity index 78%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/ledger.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/ledger.md
index c9b9cf93..7daac048 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/ledger.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/ledger.md
@@ -4,7 +4,7 @@
 |---|---|
 | 任务 ID | ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 |
 | Goal ref | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 |
-| Goal current path | queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md |
+| Goal current path | queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/goal.md |
 | Context manifest | context.md |
 | Context revision | p91-foundation-atomicity-review-r2 |
 | Role ref | role:p91-foundation-atomicity-reviewer-r2 |
@@ -16,14 +16,14 @@
 | Frozen spec | .agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2 |
 | Graph node | .agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1 |
 | 依赖/路由 | needs: p91_foundation_atomicity_h1 candidate f9b1b22; PASS -> p91_domain_implementation; FAIL -> failed; max_attempts=1 |
-| 状态 | active |
+| 状态 | failed |
 | 负责人 | p91-foundation-atomicity-reviewer-r2 |
 | 分配理由 | 职责匹配 |
 | 轮次 | 1 |
 | 开始时间 | 2026-08-13T08:52:24+00:00 |
-| 最后更新 | 2026-08-13T08:55:28+00:00 |
-| 验收结果 | PENDING |
-| 日志指针 | PENDING |
+| 最后更新 | 2026-08-13T09:08:08+00:00 |
+| 验收结果 | INVALID_TOOL_PATH: /usr/bin/mkdir absent before no-Godot preflight; no product judgment |
+| 日志指针 | /private/tmp/abg-p91-foundation-atomicity-r2.MpiPpo/terminal.txt SHA-256 a5a70679ad08c50d6e2d1cfe791be9fbd8f46c21d5135c1660edaf4a3f790784; HAPI archived |
 | Runtime requested | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime observed | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime verification | VERIFIED |
@@ -32,7 +32,7 @@
 | Dispatch bootstrap | dispatch.md |
 | Dispatch message | SENT: dispatch:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2:attempt-1 via HAPI 47752063 after pre-dispatch verification 9114cf91 |
 | Identity ACK | VERIFIED: IDENTITY_READY dispatch_id=dispatch:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2:attempt-1 role=role:p91-foundation-atomicity-reviewer-r2 team_revision=rev-p9.1-1 goal=task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 context_revision=p91-foundation-atomicity-review-r2 |
-| 等待归属 | 在等谁：p91-foundation-atomicity-reviewer-r2；等什么：fixed f9b1b22 PASS/FAIL/INVALID；PMO 600s HAPI timer/observe |
+| 等待归属 | none; append-only INVALID; fresh R3 validates all fixed tool paths before filesystem/Godot actions |
 
 ## 备注
 
@@ -45,3 +45,4 @@ Prepared from task-manifest.json. Do not hand-edit field names.
 | 2026-08-13T08:52:24+00:00 | created -> inbox | PMO | structured manifest | run pre-dispatch validation |
 | 2026-08-13T08:53:18+00:00 | inbox -> inbox | PMO | fresh R2 HAPI VERIFIED at correct cwd/model/effort/yolo with zero-message watermark | commit binding, fast-forward worktree, send identity bootstrap |
 | 2026-08-13T08:55:28+00:00 | inbox -> active | PMO | exact standalone R2 identity ACK observed before review commands | fast-forward activation and execute authority-derived fixed-source review |
+| 2026-08-13T09:08:08+00:00 | active -> failed | PMO | nonexistent /usr/bin/mkdir stopped no-Godot preflight before candidate execution; terminal a5a70679; worktrees clean | archive HAPI; fresh R3 prevalidates fixed tool table |
diff --git a/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/report.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/report.md
new file mode 100644
index 00000000..d27032d8
--- /dev/null
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/report.md
@@ -0,0 +1,12 @@
+# Review Report: ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2
+
+`ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 INVALID: Bash preflight setup`
+
+- Reviewer HAPI `47752063-6c74-403b-8f88-22174953f8af` archived.
+- Fixed candidate `f9b1b22a51257126193535c7dc22dfabd47d9dbc`.
+- `/usr/bin/mkdir` does not exist on this macOS host; the correct path is `/bin/mkdir`.
+- Failure occurred before no-Godot preflight, candidate execution, or repository writes.
+- Terminal SHA-256 `a5a70679ad08c50d6e2d1cfe791be9fbd8f46c21d5135c1660edaf4a3f790784`.
+
+R3 must first prove all fixed executable paths, including `/bin/mkdir` and
+`/usr/bin/find`, before creating its preflight or archive roots.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/runtime-evidence.json b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/runtime-evidence.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/runtime-evidence.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/runtime-evidence.json
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/task-manifest.json b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/task-manifest.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/task-manifest.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/task-manifest.json
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/context.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/context.md
new file mode 100644
index 00000000..32a8bf85
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/context.md
@@ -0,0 +1,29 @@
+# Context Manifest: ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3
+
+> Task ID: `ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3`
+> Revision: `p91-foundation-atomicity-review-r3`
+> Mode: `deep`
+> Budget exception: `none`
+
+## 必须读取（默认不超过 8 项）
+
+| 路径或稳定引用 | Revision / 范围 | 为什么本 Goal 必须读 |
+|---|---|---|
+| `AGENTS.md` | f9b1b22 | fixed-reviewer and evidence boundaries |
+| `.agent-taskgraph/PROJECT.md` | P9.1 profile | visible HAPI reviewer runtime and downstream freeze |
+| `.agent-taskgraph/spec.md` | p9.1-spec-r2 | frozen P9.1 scope |
+| `docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md` | p9.1-contract-r2 | atomic revision, exact-ID and 22-script authority |
+| `.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md` | terminal ae6045c5 | product defect that H1 must close |
+| `.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R1/report.md` | terminal d7d02847 | atomicity passed but incorrect PMO mode split invalidated final judgment |
+| `.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/report.md` | terminal a5a70679 | tool-path INVALID that R3 must not repeat |
+| `/private/tmp/abg-p9-0r10-regression-r2.4fxrTu/summary.txt` | sha256 3de791bb6da14be19d97c194368cd14bc8bfb906013470e81b6e12da83736bf7 | parse every accepted mode/script row directly; 12 headless and 10 normal |
+
+## 按需检索（先搜索，再局部读取）
+
+| 路径/范围 | 触发条件 | 检索提示 |
+|---|---|---|
+| source tree | Goal 需要实现细节时 | 先 rg，再局部读取 |
+
+## 最近 Delta
+
+- 2026-08-13T09:14:30+00:00: structured pre-dispatch manifest created.
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/dispatch.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/dispatch.md
new file mode 100644
index 00000000..32127d2f
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/dispatch.md
@@ -0,0 +1,21 @@
+# Dispatch Bootstrap: ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3
+
+| Field | Value |
+|---|---|
+| Task ID | ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 |
+| Dispatch ID | dispatch:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3:attempt-1 |
+| Role ref | role:p91-foundation-atomicity-reviewer-r3 |
+| Role profile | roles/p91-foundation-atomicity-reviewer-r3/ROLE.md |
+| Role lifecycle | task-scoped |
+| Team revision | rev-p9.1-1 |
+| Goal ref | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 |
+| Context manifest | context.md |
+| Context revision | p91-foundation-atomicity-review-r3 |
+| Continuity | fresh tool-path recovery after R2 INVALID; no prior reviewer execution evidence reuse |
+| Session ID | PENDING |
+| Expected identity ACK | IDENTITY_READY dispatch_id=dispatch:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3:attempt-1 role=role:p91-foundation-atomicity-reviewer-r3 team_revision=rev-p9.1-1 goal=task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 context_revision=p91-foundation-atomicity-review-r3 |
+| Delivery | NOT_SENT |
+| Identity ACK | PENDING |
+| ACK evidence | PENDING |
+
+Read Role, PROJECT, context, Goal and direct evidence in that order. Return the exact identity ACK before executing the Goal.
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/goal.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/goal.md
new file mode 100644
index 00000000..d606c986
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/goal.md
@@ -0,0 +1,84 @@
+# Goal: Independently review Foundation atomicity after tool-table preflight
+
+> Stage: foundation-atomicity-independent-rereview-r3
+> Started: 2026-08-13T09:14:30+00:00
+> Task ID: `ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3`
+> Baseline: `25c985395f720ac294718d60608415378bd59068; branch=review/abg-p91-foundation-atomicity-r3; clean`
+> Frozen spec: `.agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2`
+> Graph node: `.agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1`
+> Independent contract: 不适用
+> Context manifest: `context.md`
+> Context revision: `p91-foundation-atomicity-review-r3`
+> Legal terminal: **ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 PASS**，或 **ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 FAIL: <最早产品失败边界>**，或 **ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 INVALID: <最早 harness/环境/证据边界>**
+
+## Objective
+
+Review immutable f9b1b22 from zero. Before creating any reviewer-owned directory or running Godot, verify that every fixed executable exists and is executable: /bin/bash, /bin/mkdir, /usr/bin/find, /usr/bin/git, /usr/bin/shasum, /usr/bin/awk, /usr/bin/sed, /usr/bin/sort, /usr/bin/xargs, /bin/ps, /usr/bin/pgrep, /usr/bin/mktemp and /bin/cp. Then use Bash 3-compatible syntax only, never rm/unlink, and pass the guarded find-delete no-Godot preflight. Fresh archive/import and independently verify the complete public-command atomicity matrix, exact Guild IDs and legacy rejection. Copy the immutable accepted summary, require SHA-256 3de791bb..., and build the 22-script execution list by parsing each row's first token as mode and second token as script; verify exactly 12 headless and 10 normal. Apply --fixed-fps 60 to every parsed normal row. Fresh-capture rejected baseline bd505d6 and repaired candidate f9b1b22, four groups and 30 frames each, and require identical inventory and PNG bytes. Report PASS, product FAIL or harness INVALID at the earliest boundary; never repair.
+
+## 图输入、输出与写入范围
+
+- 直接依赖（needs）：p91_foundation_atomicity_h1 candidate f9b1b22
+- 必须读取（consumes）：f9b1b22 fixed source, R5 FAIL ae6045c5, R1 INVALID d7d02847, R2 INVALID a5a70679, hash-fixed accepted summary 3de791bb
+- 必须产出（produces）：fresh read-only PASS, FAIL or INVALID terminal with reviewer-owned sanitized evidence
+- 唯一写入范围（writes）：none in repository; reviewer-owned isolated temporary evidence only
+- 路由：PASS -> p91_domain_implementation；FAIL -> failed；最大尝试 1
+
+## 分配记录
+
+- Role ref：`role:p91-foundation-atomicity-reviewer-r3`
+- 角色职责：Independently verify immutable f9b1b22 after proving the fixed macOS executable table and authority-derived execution map
+- 角色生命周期：task-scoped
+- 派给：p91-foundation-atomicity-reviewer-r3
+- 分配理由：职责匹配
+- 连续性：fresh tool-path recovery after R2 INVALID; no prior reviewer execution evidence reuse
+- 工作区：`/Users/wusumac/Documents/game/tmp/aetherbound-guild-worktrees/p91-foundation-atomicity-review-r3`（分支：`review/abg-p91-foundation-atomicity-r3`）
+- Runtime requested：`runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible`
+- Runtime observed：`PENDING`
+- Runtime verification：`PENDING`
+- Session evidence：`PENDING`
+- Dispatch bootstrap：`dispatch.md`
+- Dispatch message：`NOT_SENT`
+- Identity ACK：`PENDING`
+- 完整启动方式：派发预览批准后由所选 runtime 控制面生成
+
+## 报告协议
+
+- 完成、失败或阻塞时通知 PMO，并引用任务号、legal terminal 和证据路径。
+- worker 不修改 PMO 管理的 queue ledger、STATUS 或角色注册表。
+
+## 验收标准（证据门）
+
+- [ ] Before mkdir/mktemp/Godot, prove all 13 fixed executable paths exist and are executable; stop INVALID on the first missing tool
+- [ ] Pass Bash3-compatible no-Godot preflight: false rc=1, guarded absolute /private/tmp root and direct /usr/bin/find -depth -delete; no rm/unlink
+- [ ] Prove fixed f9b1b22, parent cf8d670, rejected ancestor bd505d6, exactly three authorized candidate paths, clean worktrees and fresh archives
+- [ ] Independently enumerate and verify every public mutator across success and rejection branches with complete internal-state fingerprints, exact Guild IDs and zero legacy leak
+- [ ] Verify accepted summary SHA 3de791bb; parse all 22 mode/script rows directly; derive exactly 12 headless/10 normal; every normal row uses --fixed-fps 60
+- [ ] Require every parsed script exit 0, emit its authority marker exactly once and strict diagnostics zero
+- [ ] Fresh-capture bd505d6 and f9b1b22 four groups/30 frames each; inventories and PNG bytes identical; sanitize/hash retained evidence and guarded cleanup
+
+## Frozen（禁止触碰，明确列出）
+
+- Do not edit, repair, stage, commit, push, merge or modify repository files or refs
+- Do not reuse developer, R1, R2 or prior Foundation reviewer execution logs/captures as R3 execution evidence
+- Do not hand-author or infer a separate 22-script mode map; execution order and mode must come from the hash-fixed summary rows
+- Do not invoke rm, unlink, zsh wrappers, mapfile, or variables named status/path; use /bin/bash, Bash 3 syntax, rc/review_root and guarded direct find-delete
+- Do not expose credentials, foreign process argv or machine-wide environment; retain only sanitized reviewer-owned facts and hashes
+- Do not implement downstream work, generate media, package, sign, upload, publish or cross Human Gates; harness failures are INVALID
+
+## Estimate
+
+tool and source preflight 15m; independent atomicity matrix 30-60m; authority-parsed 22 scripts 30-60m; two-source 30-frame capture 45-90m; confidence high
+
+## 完成时交付
+
+- graph 节点约定的 produces
+- 验收证据与残余风险
+
+## Review Classification
+
+- `PASS` only when every declared gate passes on the immutable candidate.
+- `FAIL` only for a candidate product defect at the earliest declared product boundary.
+- `INVALID` for tool, shell, import, test harness, capture, cleanup, concurrent-load,
+  environment or evidence-integrity failure that prevents a product judgment.
+- Stop at the first terminal boundary. Do not retry, repair, continue later gates or
+  convert an `INVALID` into a product `FAIL`.
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/ledger.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/ledger.md
new file mode 100644
index 00000000..1272a896
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/ledger.md
@@ -0,0 +1,45 @@
+# 台账记录：ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3
+
+| 字段 | 值 |
+|---|---|
+| 任务 ID | ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 |
+| Goal ref | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 |
+| Goal current path | queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/goal.md |
+| Context manifest | context.md |
+| Context revision | p91-foundation-atomicity-review-r3 |
+| Role ref | role:p91-foundation-atomicity-reviewer-r3 |
+| Role lifecycle | task-scoped |
+| Role profile | roles/p91-foundation-atomicity-reviewer-r3/ROLE.md |
+| Role continuity | fresh tool-path recovery after R2 INVALID; no prior reviewer execution evidence reuse |
+| Reviewer Role ref | PENDING |
+| Reviewer Role profile | PENDING |
+| Frozen spec | .agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2 |
+| Graph node | .agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1 |
+| 依赖/路由 | needs: p91_foundation_atomicity_h1 candidate f9b1b22; PASS -> p91_domain_implementation; FAIL -> failed; max_attempts=1 |
+| 状态 | inbox |
+| 负责人 | p91-foundation-atomicity-reviewer-r3 |
+| 分配理由 | 职责匹配 |
+| 轮次 | 1 |
+| 开始时间 | 2026-08-13T09:14:30+00:00 |
+| 最后更新 | 2026-08-13T09:14:30+00:00 |
+| 验收结果 | PENDING |
+| 日志指针 | PENDING |
+| Runtime requested | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
+| Runtime observed | PENDING |
+| Runtime verification | PENDING |
+| Session ID | PENDING |
+| Runtime evidence | PENDING |
+| Dispatch bootstrap | dispatch.md |
+| Dispatch message | NOT_SENT |
+| Identity ACK | PENDING |
+| 等待归属 | 在等谁：PMO；等什么：spawn + runtime verification + IDENTITY_READY；静默 5 分钟必须诊断并告知 Owner |
+
+## 备注
+
+Prepared from task-manifest.json. Do not hand-edit field names.
+
+## 状态转换历史（追加式）
+
+| 时间 | from -> to | 操作者 | 依据/证据 | 唯一下一步 |
+|---|---|---|---|---|
+| 2026-08-13T09:14:30+00:00 | created -> inbox | PMO | structured manifest | run pre-dispatch validation |
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/task-manifest.json b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/task-manifest.json
new file mode 100644
index 00000000..4ae13464
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3/task-manifest.json
@@ -0,0 +1,104 @@
+{
+  "task_id": "ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3",
+  "title": "Independently review Foundation atomicity after tool-table preflight",
+  "stage": "foundation-atomicity-independent-rereview-r3",
+  "baseline": "25c985395f720ac294718d60608415378bd59068",
+  "branch": "review/abg-p91-foundation-atomicity-r3",
+  "worktree": "/Users/wusumac/Documents/game/tmp/aetherbound-guild-worktrees/p91-foundation-atomicity-review-r3",
+  "frozen_spec": ".agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2",
+  "graph_node": ".agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1",
+  "context_revision": "p91-foundation-atomicity-review-r3",
+  "context_mode": "deep",
+  "context_items": [
+    {
+      "path": "AGENTS.md",
+      "revision": "f9b1b22",
+      "reason": "fixed-reviewer and evidence boundaries"
+    },
+    {
+      "path": ".agent-taskgraph/PROJECT.md",
+      "revision": "P9.1 profile",
+      "reason": "visible HAPI reviewer runtime and downstream freeze"
+    },
+    {
+      "path": ".agent-taskgraph/spec.md",
+      "revision": "p9.1-spec-r2",
+      "reason": "frozen P9.1 scope"
+    },
+    {
+      "path": "docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md",
+      "revision": "p9.1-contract-r2",
+      "reason": "atomic revision, exact-ID and 22-script authority"
+    },
+    {
+      "path": ".agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md",
+      "revision": "terminal ae6045c5",
+      "reason": "product defect that H1 must close"
+    },
+    {
+      "path": ".agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R1/report.md",
+      "revision": "terminal d7d02847",
+      "reason": "atomicity passed but incorrect PMO mode split invalidated final judgment"
+    },
+    {
+      "path": ".agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2/report.md",
+      "revision": "terminal a5a70679",
+      "reason": "tool-path INVALID that R3 must not repeat"
+    },
+    {
+      "path": "/private/tmp/abg-p9-0r10-regression-r2.4fxrTu/summary.txt",
+      "revision": "sha256 3de791bb6da14be19d97c194368cd14bc8bfb906013470e81b6e12da83736bf7",
+      "reason": "parse every accepted mode/script row directly; 12 headless and 10 normal"
+    }
+  ],
+  "role_id": "p91-foundation-atomicity-reviewer-r3",
+  "role_lifecycle": "task-scoped",
+  "role_responsibility": "Independently verify immutable f9b1b22 after proving the fixed macOS executable table and authority-derived execution map",
+  "role_continuity": "fresh tool-path recovery after R2 INVALID; no prior reviewer execution evidence reuse",
+  "runtime_requested": {
+    "runtime": "hapi",
+    "flavor": "codex",
+    "model": "gpt-5.6-sol",
+    "effort": "xhigh",
+    "permission": "yolo",
+    "visibility": "visible"
+  },
+  "objective": "Review immutable f9b1b22 from zero. Before creating any reviewer-owned directory or running Godot, verify that every fixed executable exists and is executable: /bin/bash, /bin/mkdir, /usr/bin/find, /usr/bin/git, /usr/bin/shasum, /usr/bin/awk, /usr/bin/sed, /usr/bin/sort, /usr/bin/xargs, /bin/ps, /usr/bin/pgrep, /usr/bin/mktemp and /bin/cp. Then use Bash 3-compatible syntax only, never rm/unlink, and pass the guarded find-delete no-Godot preflight. Fresh archive/import and independently verify the complete public-command atomicity matrix, exact Guild IDs and legacy rejection. Copy the immutable accepted summary, require SHA-256 3de791bb..., and build the 22-script execution list by parsing each row's first token as mode and second token as script; verify exactly 12 headless and 10 normal. Apply --fixed-fps 60 to every parsed normal row. Fresh-capture rejected baseline bd505d6 and repaired candidate f9b1b22, four groups and 30 frames each, and require identical inventory and PNG bytes. Report PASS, product FAIL or harness INVALID at the earliest boundary; never repair.",
+  "needs": [
+    "p91_foundation_atomicity_h1 candidate f9b1b22"
+  ],
+  "consumes": [
+    "f9b1b22 fixed source",
+    "R5 FAIL ae6045c5",
+    "R1 INVALID d7d02847",
+    "R2 INVALID a5a70679",
+    "hash-fixed accepted summary 3de791bb"
+  ],
+  "produces": [
+    "fresh read-only PASS, FAIL or INVALID terminal with reviewer-owned sanitized evidence"
+  ],
+  "writes": [
+    "none in repository; reviewer-owned isolated temporary evidence only"
+  ],
+  "pass_route": "p91_domain_implementation",
+  "fail_route": "failed",
+  "max_attempts": 1,
+  "acceptance": [
+    "[ ] Before mkdir/mktemp/Godot, prove all 13 fixed executable paths exist and are executable; stop INVALID on the first missing tool",
+    "[ ] Pass Bash3-compatible no-Godot preflight: false rc=1, guarded absolute /private/tmp root and direct /usr/bin/find -depth -delete; no rm/unlink",
+    "[ ] Prove fixed f9b1b22, parent cf8d670, rejected ancestor bd505d6, exactly three authorized candidate paths, clean worktrees and fresh archives",
+    "[ ] Independently enumerate and verify every public mutator across success and rejection branches with complete internal-state fingerprints, exact Guild IDs and zero legacy leak",
+    "[ ] Verify accepted summary SHA 3de791bb; parse all 22 mode/script rows directly; derive exactly 12 headless/10 normal; every normal row uses --fixed-fps 60",
+    "[ ] Require every parsed script exit 0, emit its authority marker exactly once and strict diagnostics zero",
+    "[ ] Fresh-capture bd505d6 and f9b1b22 four groups/30 frames each; inventories and PNG bytes identical; sanitize/hash retained evidence and guarded cleanup"
+  ],
+  "frozen": [
+    "Do not edit, repair, stage, commit, push, merge or modify repository files or refs",
+    "Do not reuse developer, R1, R2 or prior Foundation reviewer execution logs/captures as R3 execution evidence",
+    "Do not hand-author or infer a separate 22-script mode map; execution order and mode must come from the hash-fixed summary rows",
+    "Do not invoke rm, unlink, zsh wrappers, mapfile, or variables named status/path; use /bin/bash, Bash 3 syntax, rc/review_root and guarded direct find-delete",
+    "Do not expose credentials, foreign process argv or machine-wide environment; retain only sanitized reviewer-owned facts and hashes",
+    "Do not implement downstream work, generate media, package, sign, upload, publish or cross Human Gates; harness failures are INVALID"
+  ],
+  "estimate": "tool and source preflight 15m; independent atomicity matrix 30-60m; authority-parsed 22 scripts 30-60m; two-source 30-frame capture 45-90m; confidence high"
+}
diff --git a/.agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r2/ROLE.md b/.agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r2/ROLE.md
index 5b55ae33..53b308cb 100644
--- a/.agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r2/ROLE.md
+++ b/.agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r2/ROLE.md
@@ -6,13 +6,13 @@
 | Team revision | rev-p9.1-1 |
 | Origin | staffing:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 |
 | 生命周期 | task-scoped |
-| 状态 | assigned |
+| 状态 | retired |
 | 核心职责 | Independently review immutable f9b1b22 using mode/script rows parsed directly from the accepted authority |
 | 负责范围 | Fixed source f9b1b22 and reviewer-owned isolated temporary evidence |
 | 明确不负责 | Product repair, repository/ref writes, downstream implementation, packaging or release |
-| 当前 Goal | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 |
-| 当前 Session ID | 47752063-6c74-403b-8f88-22174953f8af |
-| 连续性记录 | Fresh contract recovery after R1 INVALID; no prior reviewer execution evidence reuse |
+| 当前 Goal | none |
+| 当前 Session ID | none |
+| 连续性记录 | R2 INVALID before preflight because /usr/bin/mkdir was absent; no candidate execution |
 | 最后更新 | 2026-08-13 / PMO |
 
 ## 连续性历史
@@ -21,3 +21,4 @@
 |---|---|---|---|---|
 | 2026-08-13T08:49:41Z | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 | PENDING | available -> reserved | fixed f9b1b22; accepted summary SHA 3de791bb; parse 12/10 rows directly |
 | 2026-08-13T08:55:28Z | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R2 | 47752063-6c74-403b-8f88-22174953f8af | reserved -> assigned | exact identity ACK verified; fixed-source review activated |
+| 2026-08-13T09:08:08Z | none | 47752063-6c74-403b-8f88-22174953f8af | assigned -> retired | INVALID_TOOL_PATH before candidate execution; HAPI archived |
diff --git a/.agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r3/ROLE.md b/.agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r3/ROLE.md
new file mode 100644
index 00000000..5c92411d
--- /dev/null
+++ b/.agent-taskgraph/roles/p91-foundation-atomicity-reviewer-r3/ROLE.md
@@ -0,0 +1,22 @@
+# Role: P9.1 Foundation Atomicity Reviewer R3
+
+| 字段 | 值 |
+|---|---|
+| Role ID | p91-foundation-atomicity-reviewer-r3 |
+| Team revision | rev-p9.1-1 |
+| Origin | staffing:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 |
+| 生命周期 | task-scoped |
+| 状态 | reserved |
+| 核心职责 | Independently review immutable f9b1b22 after proving the macOS tool table and authority-derived execution map |
+| 负责范围 | Fixed source f9b1b22 and reviewer-owned isolated temporary evidence |
+| 明确不负责 | Product repair, repository/ref writes, downstream implementation, packaging or release |
+| 当前 Goal | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 |
+| 当前 Session ID | PENDING |
+| 连续性记录 | Fresh tool-path recovery after R2 INVALID; no prior reviewer execution evidence reuse |
+| 最后更新 | 2026-08-13 / PMO |
+
+## 连续性历史
+
+| 时间 | Goal | Session ID | 状态变化 | handoff / 证据 |
+|---|---|---|---|---|
+| 2026-08-13T09:08:08Z | task:ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3 | PENDING | available -> reserved | fixed f9b1b22; tool table + accepted-summary rows must pass before candidate work |
diff --git a/.agent-taskgraph/staffing/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.md b/.agent-taskgraph/staffing/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.md
new file mode 100644
index 00000000..4a5f7336
--- /dev/null
+++ b/.agent-taskgraph/staffing/ABG-P9.1-FOUNDATION-ATOMICITY-REVIEW-R3.md
@@ -0,0 +1,17 @@
+# Staffing Change: Foundation Atomicity Reviewer R3 Tool-Path Recovery
+
+> Team revision: `rev-p9.1-1 -> rev-p9.1-1`
+> Status: `APPLIED`
+> Type: `REPLACE`
+> Proposed by: `PMO / 2026-08-13T09:08:08Z`
+> Approved by: `PROJECT.md environment recovery policy and Owner instruction to continue`
+
+R2 stopped before Godot because it assumed `/usr/bin/mkdir`; macOS provides
+`/bin/mkdir`. R3 keeps fixed source `f9b1b22`, writes none and fresh evidence.
+Before creating any directory, it must verify this complete executable table:
+`/bin/bash`, `/bin/mkdir`, `/usr/bin/find`, `/usr/bin/git`, `/usr/bin/shasum`,
+`/usr/bin/awk`, `/usr/bin/sed`, `/usr/bin/sort`, `/usr/bin/xargs`, `/bin/ps`,
+`/usr/bin/pgrep`, `/usr/bin/mktemp`, `/bin/cp`. It then parses execution mode
+and script identity directly from accepted summary SHA `3de791bb...`.
+
+Final result: `APPLIED / pre-dispatch`.