From 3dfd83675885e39e90f1d54afddd613f2a87a2de Mon Sep 17 00:00:00 2001
From: wusumac <736139669@qq.com>
Date: Thu, 13 Aug 2026 14:39:08 +0800
Subject: [PATCH] chore(pmo): route foundation atomicity hotfix

---
 .agent-taskgraph/DECISIONS.md                 |   7 ++
 .agent-taskgraph/ROLES.md                     |   5 +-
 .agent-taskgraph/STATUS.md                    |   8 +-
 .agent-taskgraph/graph.yaml                   |  21 +++-
 .../ABG-P9.1-FOUNDATION-REVIEW-R5/context.md  |   0
 .../ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md |   0
 .../ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md     |  10 ++
 .../ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md   |  13 +--
 .../ABG-P9.1-FOUNDATION-REVIEW-R5/report.md   |  16 +++
 .../runtime-evidence.json                     |   0
 .../task-manifest.json                        |   0
 .../ABG-P9.1-RUNTIME-FOUNDATION/context.md    |   0
 .../ABG-P9.1-RUNTIME-FOUNDATION/dispatch.md   |   0
 .../ABG-P9.1-RUNTIME-FOUNDATION/goal.md       |   7 ++
 .../ABG-P9.1-RUNTIME-FOUNDATION/ledger.md     |  13 +--
 .../ABG-P9.1-RUNTIME-FOUNDATION/report.md     |  12 +++
 .../runtime-evidence.json                     |   0
 .../task-manifest.json                        |   0
 .../context.md                                |  29 +++++
 .../dispatch.md                               |  21 ++++
 .../ABG-P9.1-FOUNDATION-ATOMICITY-H1/goal.md  |  72 +++++++++++++
 .../ledger.md                                 |  45 ++++++++
 .../task-manifest.json                        | 102 ++++++++++++++++++
 .../roles/p91-foundation-reviewer-r5/ROLE.md  |   9 +-
 .../p91-runtime-foundation-developer/ROLE.md  |  14 ++-
 25 files changed, 373 insertions(+), 31 deletions(-)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md (85%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md (76%)
 create mode 100644 .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-REVIEW-R5/runtime-evidence.json (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-RUNTIME-FOUNDATION/context.md (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-RUNTIME-FOUNDATION/dispatch.md (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-RUNTIME-FOUNDATION/goal.md (92%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-RUNTIME-FOUNDATION/ledger.md (83%)
 create mode 100644 .agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/report.md
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-RUNTIME-FOUNDATION/runtime-evidence.json (100%)
 rename .agent-taskgraph/queue/{active => failed}/ABG-P9.1-RUNTIME-FOUNDATION/task-manifest.json (100%)
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/context.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/dispatch.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/goal.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/ledger.md
 create mode 100644 .agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/task-manifest.json

diff --git a/.agent-taskgraph/DECISIONS.md b/.agent-taskgraph/DECISIONS.md
index eec7b770..fa46d642 100644
--- a/.agent-taskgraph/DECISIONS.md
+++ b/.agent-taskgraph/DECISIONS.md
@@ -31,3 +31,10 @@
 - Visual candidate `0c640eb` 已集成主线为 `71b7f71`。
 - 六个 844x390 状态加灰盒均无 overflow，14 个来源 hash 一致；现有接受素材足够，因此没有为了消耗授权而强制付费生成，实际 `0/4` 次、`USD 0/5`。
 - 该切片是后续 UI/动效实现目标，不是 Owner 视觉验收，也不证明真实 Godot 运行、触摸、声音或乐趣。
+
+## 2026-08-13 / P9.1 Foundation revision 原子性
+
+- Foundation R5 fresh reviewer 在固定 `bd505d6` 上证明 `open_new_session` 一次成功命令把 revision 从 `0` 增至 `2`，违反每个成功命令恰好 `+1` 的冻结约束。
+- 原 Foundation Goal 已使用两个产品候选，按任务图关闭为 FAIL；不把第三次修复改写成同一 attempt。
+- 新增 bounded successor `ABG-P9.1-FOUNDATION-ATOMICITY-H1`，复用原 persistent Foundation 角色/工作树，仅拥有 `session_state.gd`、`session_service.gd` 和新的 focused atomicity regression。
+- Domain/UI/Test 的依赖改为 H1 PASS；其他玩法、视觉、内容、打包和 Human Gates 继续冻结。
diff --git a/.agent-taskgraph/ROLES.md b/.agent-taskgraph/ROLES.md
index 2cf2e425..334d6c72 100644
--- a/.agent-taskgraph/ROLES.md
+++ b/.agent-taskgraph/ROLES.md
@@ -7,7 +7,7 @@
 | p91-game-designer | P9.1 游戏策划 | persistent | available | 六组合首局玩法、取舍、节奏和结果 | none | none | 2026-08-13 |
 | p91-ux-visual-designer | P9.1 UX/视觉设计师 | persistent | available | 横屏页面、状态、中文因果表达与动效 | none | none | 2026-08-13 |
 | p91-runtime-architect | P9.1 技术架构师 | persistent | available | 运行时拆分、API、状态所有权和迁移 | none | none | 2026-08-13 |
-| p91-runtime-foundation-developer | 运行时基础开发 | persistent | assigned | 行为等价拆分与并行扩展边界 | task:ABG-P9.1-RUNTIME-FOUNDATION | c70ab47f-b764-42a1-b4b5-2eab342e8b25 | 2026-08-13 |
+| p91-runtime-foundation-developer | 运行时基础开发 | persistent | reserved | 行为等价拆分与并行扩展边界 | task:ABG-P9.1-FOUNDATION-ATOMICITY-H1 | PENDING | 2026-08-13 |
 | p91-domain-developer | 领域逻辑开发 | persistent | available | 六组合领域状态和事务 | PENDING | PENDING | 2026-08-13 |
 | p91-ui-developer | Godot UI 开发 | persistent | available | P9.1 真实页面与反馈 | PENDING | PENDING | 2026-08-13 |
 | p91-test-developer | 测试与证据开发 | persistent | available | 矩阵、触摸、布局与捕获工具 | PENDING | PENDING | 2026-08-13 |
@@ -16,7 +16,7 @@
 | p91-foundation-reviewer-r2 | P9.1 Foundation 复审 | task-scoped | retired | 固定修复 revision 从零复审 | none | none | 2026-08-13 |
 | p91-foundation-reviewer-r3 | P9.1 Foundation 环境恢复复审 | task-scoped | retired | 固定 bd505d6 从零复审，修正 reviewer import/probe 环境 | none | none | 2026-08-13 |
 | p91-foundation-reviewer-r4 | P9.1 Foundation Bash 复审 | task-scoped | retired | 固定 bd505d6 从零复审，使用预检后的 bash harness | none | none | 2026-08-13 |
-| p91-foundation-reviewer-r5 | P9.1 Foundation no-rm 复审 | task-scoped | assigned | 固定 bd505d6 从零复审，使用执行控制允许的 find-delete Bash harness | task:ABG-P9.1-FOUNDATION-REVIEW-R5 | 6fac5053-6144-4bfd-944d-b131988066cd | 2026-08-13 |
+| p91-foundation-reviewer-r5 | P9.1 Foundation no-rm 复审 | task-scoped | retired | 固定 bd505d6 从零复审，使用执行控制允许的 find-delete Bash harness | none | none | 2026-08-13 |
 | p91-h5-publisher | P9.1 H5 发布员 | task-scoped | available | 固定源 Web 导出与 Gallery 发布 | PENDING | PENDING | 2026-08-13 |
 
 ## 编制变更历史
@@ -29,3 +29,4 @@
 | 2026-08-13 | rev-p9.1-1 | Foundation reviewer 环境恢复 R2 -> R3 | R2 在产品断言前 harness INVALID；自动相同边界恢复 | R3 固定同一 `bd505d6`，fresh session/archive，writes=none |
 | 2026-08-13 | rev-p9.1-1 | Foundation reviewer Bash 恢复 R3 -> R4 | R3 在产品门前 zsh wrapper INVALID；自动环境恢复 | R4 强制 `/bin/bash` + preflight，固定 `bd505d6`，writes=none |
 | 2026-08-13 | rev-p9.1-1 | Foundation reviewer tool-policy 恢复 R4 -> R5 | R4 在 Bash/Godot 前因 `rm` 风格清理被执行控制拒绝；自动环境恢复 | R5 禁止 `rm`/`unlink`，只用前缀保护的绝对路径和 `find -depth -delete`，固定 `bd505d6`，writes=none |
+| 2026-08-13 | rev-p9.1-1 | Foundation -> atomicity successor H1 | R5 product FAIL after the original Goal's second candidate | Reuse persistent Foundation role; own only revision atomicity + focused regression; downstream remains frozen |
diff --git a/.agent-taskgraph/STATUS.md b/.agent-taskgraph/STATUS.md
index 29e42c0e..1e680d48 100644
--- a/.agent-taskgraph/STATUS.md
+++ b/.agent-taskgraph/STATUS.md
@@ -3,15 +3,13 @@
 | 任务 ID | 标题 | 状态 | 负责人 | 轮次 | 最后更新 | 卡点 |
 |---|---|---|---|---|---|---|
 
-| ABG-P9.1-RUNTIME-FOUNDATION | P9.1 behavior-equivalent runtime foundation extraction | active | p91-runtime-foundation-developer | product 2/2 / recovery 4 | 2026-08-13T04:45:08Z | repaired candidate bd505d6 ready; R5 review recovery pending |
-
-| ABG-P9.1-FOUNDATION-REVIEW-R5 | Independently review P9.1 Foundation with no-rm Bash harness | active | p91-foundation-reviewer-r5 | 1 | 2026-08-13T06:08:32Z | preflight/import PASS; exact-ID probe active |
+| ABG-P9.1-FOUNDATION-ATOMICITY-H1 | Repair Foundation successful-command revision atomicity | inbox | p91-runtime-foundation-developer | 1 | 2026-08-13T06:36:00Z | preparing 0/1: session not created |
 
 ## 当前批次总结
 
 - 批次：`abg-p9-1-continuous-development-01`。
 - 已完成：三份专家规格已推送；PMO 当前冻结 authority 为 `p9.1-contract-r2`（权威 22-test baseline）。
 - 视觉切片：candidate `0c640eb` 已作为 `71b7f71` 集成；六帧 844x390，付费使用 0/4、USD 0/5，Owner visual gate 仍开放。
-- 当前 Gate：R4 在 Bash/Godot 前因执行控制拒绝 `rm` 风格清理而 INVALID；准备 fresh R5 no-rm reviewer，固定源仍为 `bd505d6`，下游冻结。
-- PMO 监控循环：`RUNNING`，目标 HAPI `6fac5053-6144-4bfd-944d-b131988066cd`，间隔 600 秒；wait=真实 timer/observe cell，observe=`inspect_peer` + ledger。
+- 当前 Gate：R5 product FAIL，`open_new_session` revision delta `2`；bounded H1 atomicity repair 正在准备，下游冻结。
+- PMO 监控循环：`EXITED`，原因：R5 legal FAIL terminal observed；H1 激活后重新登记 600 秒循环。
 - 结束 Gate：独立 reviewer PASS 后发布新 H5，Owner 再判断理解、乐趣和继续意愿。
diff --git a/.agent-taskgraph/graph.yaml b/.agent-taskgraph/graph.yaml
index c9d643b5..6b28afd0 100644
--- a/.agent-taskgraph/graph.yaml
+++ b/.agent-taskgraph/graph.yaml
@@ -70,10 +70,23 @@ nodes:
     produces: ["runtime/domain/p9_1/session_state.gd", "runtime/domain/p9_1/session_service.gd", "runtime/domain/p9_1/battle_fixture.gd", "runtime/presentation/", "runtime/ui/session_presenter.gd", "runtime/ui/widgets.gd", "runtime/compat/p9_0_root_facade.gd"]
     writes: ["runtime/main.gd", "runtime/domain/p9_1/contracts.gd", "runtime/domain/p9_1/session_state.gd", "runtime/domain/p9_1/session_service.gd", "runtime/domain/p9_1/battle_fixture.gd", "runtime/presentation/", "runtime/ui/session_presenter.gd", "runtime/ui/widgets.gd", "runtime/compat/p9_0_root_facade.gd"]
     acceptance: ["The exact accepted 22-script P9.0R10 summary remains green", "P9.0R1-R10 declared behavior remains equivalent", "Shared state has one owner", "Parallel extension APIs compile and are covered"]
-    on_pass: "p91_domain_implementation"
+    on_pass: "p91_foundation_atomicity_h1"
     on_fail: "failed"
     max_attempts: 2
 
+  - id: "p91_foundation_atomicity_h1"
+    title: "Repair Foundation successful-command revision atomicity"
+    kind: "worker"
+    goal_ref: "task:ABG-P9.1-FOUNDATION-ATOMICITY-H1"
+    needs: ["p91_runtime_foundation"]
+    consumes: ["bd505d6 rejected candidate", "R5 FAIL evidence ae6045c5", "docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md"]
+    produces: ["Foundation atomicity repair candidate"]
+    writes: ["runtime/domain/p9_1/session_state.gd", "runtime/domain/p9_1/session_service.gd", "runtime/tests/p9_1/foundation_atomicity_test.gd"]
+    acceptance: ["Every successful public command increments revision exactly once", "Rejected commands preserve snapshot and revision", "Exact IDs remain frozen", "Exact accepted 22-script regressions and four-group/30-frame presentation equivalence pass"]
+    on_pass: "p91_domain_implementation"
+    on_fail: "failed"
+    max_attempts: 1
+
   - id: "p91_representative_visual_slice"
     title: "Produce the bounded first-battle visual slice"
     kind: "worker"
@@ -91,7 +104,7 @@ nodes:
     title: "Implement arbitrary-party P9.1 domain flow"
     kind: "worker"
     goal_ref: "task:ABG-P9.1-DOMAIN"
-    needs: ["p91_runtime_foundation"]
+    needs: ["p91_foundation_atomicity_h1"]
     consumes: ["runtime/domain/p9_1/session_service.gd", "runtime/domain/p9_1/session_state.gd", "docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md"]
     produces: ["runtime/domain/p9_1/content/", "runtime/domain/p9_1/rules/"]
     writes: ["runtime/domain/p9_1/content/", "runtime/domain/p9_1/rules/"]
@@ -104,7 +117,7 @@ nodes:
     title: "Implement P9.1 Godot screens and feedback"
     kind: "worker"
     goal_ref: "task:ABG-P9.1-UI"
-    needs: ["p91_runtime_foundation"]
+    needs: ["p91_foundation_atomicity_h1"]
     consumes: ["runtime/ui/session_presenter.gd", "runtime/ui/widgets.gd", "docs/runtime/p9_1/UX_VISUAL_FLOW_SPEC.md"]
     produces: ["runtime/ui/p9_1/"]
     writes: ["runtime/ui/p9_1/"]
@@ -117,7 +130,7 @@ nodes:
     title: "Implement P9.1 tests, matrix and capture harness"
     kind: "worker"
     goal_ref: "task:ABG-P9.1-TESTS"
-    needs: ["p91_runtime_foundation"]
+    needs: ["p91_foundation_atomicity_h1"]
     consumes: ["docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md", "runtime/tests/"]
     produces: ["runtime/tests/p9_1/", "runtime/tests/support/p9_1/"]
     writes: ["runtime/tests/p9_1/", "runtime/tests/support/p9_1/"]
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md
similarity index 85%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md
index 4117c2af..8866dc97 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md
@@ -70,3 +70,13 @@ no-rm Bash preflight 5m; environment/exact-ID/structure 45m; 22 scripts 30-60m;
 
 - graph 节点约定的 produces
 - 验收证据与残余风险
+
+## Review Terminal
+
+- `ABG-P9.1-FOUNDATION-REVIEW-R5 FAIL: successful-command revision invariant (open_new_session revision delta=2, expected 1)`.
+- Immutable candidate: `bd505d6188556b5d407bebe9769d1c99e74dc9c1`.
+- Fresh probe: `open_new_session_ok=true`, `revision_before=0`, `revision_after=2`, `screen=first_mission`.
+- Cause: `FirstSessionState.reset_transient()` increments revision, then `_change_screen() -> _success()` increments it again.
+- Preceding gates passed: no-rm Bash preflight, isolated editor import `rc=0`, exact-ID probe and zero legacy leaks.
+- Later exact 22-script and 30-frame gates were not run after the earliest product failure.
+- Evidence: `/private/tmp/abg-p91-foundation-r5-evidence.UYsX7a/terminal.txt`, SHA-256 `ae6045c523036e2aeb075303980d8145cdba5961d5b54b8cae13d38f7e510945`; manifest SHA-256 `9048e01d86f8c5bdaa8143ef0d4a6452d9f8556bf97dc416e9864c93c10a000b`.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md
similarity index 76%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md
index 87870a57..4965cfcc 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md
@@ -4,7 +4,7 @@
 |---|---|
 | 任务 ID | ABG-P9.1-FOUNDATION-REVIEW-R5 |
 | Goal ref | task:ABG-P9.1-FOUNDATION-REVIEW-R5 |
-| Goal current path | queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md |
+| Goal current path | queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md |
 | Context manifest | context.md |
 | Context revision | p91-foundation-review-r5 |
 | Role ref | role:p91-foundation-reviewer-r5 |
@@ -16,14 +16,14 @@
 | Frozen spec | .agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2 |
 | Graph node | .agent-taskgraph/graph.yaml#p91_runtime_foundation |
 | 依赖/路由 | needs: p91_runtime_foundation repaired candidate bd505d6; PASS -> p91_domain_implementation; FAIL -> failed; max_attempts=1 |
-| 状态 | active |
+| 状态 | failed |
 | 负责人 | p91-foundation-reviewer-r5 |
 | 分配理由 | 职责匹配 |
 | 轮次 | 1 |
 | 开始时间 | 2026-08-13T05:54:26+00:00 |
-| 最后更新 | 2026-08-13T06:08:32+00:00 |
-| 验收结果 | PENDING |
-| 日志指针 | PENDING |
+| 最后更新 | 2026-08-13T06:31:00+00:00 |
+| 验收结果 | FAIL: open_new_session revision delta=2 violates exactly-once successful-command revision invariant |
+| 日志指针 | /private/tmp/abg-p91-foundation-r5-evidence.UYsX7a/terminal.txt SHA-256 ae6045c523036e2aeb075303980d8145cdba5961d5b54b8cae13d38f7e510945; manifest 9048e01d86f8c5bdaa8143ef0d4a6452d9f8556bf97dc416e9864c93c10a000b; HAPI archived |
 | Runtime requested | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime observed | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime verification | VERIFIED |
@@ -32,7 +32,7 @@
 | Dispatch bootstrap | dispatch.md |
 | Dispatch message | SENT: dispatch:ABG-P9.1-FOUNDATION-REVIEW-R5:attempt-1 via HAPI 6fac5053 after pre-dispatch verification 9c09ba2e |
 | Identity ACK | VERIFIED: IDENTITY_READY dispatch_id=dispatch:ABG-P9.1-FOUNDATION-REVIEW-R5:attempt-1 role=role:p91-foundation-reviewer-r5 team_revision=rev-p9.1-1 goal=task:ABG-P9.1-FOUNDATION-REVIEW-R5 context_revision=p91-foundation-review-r5 |
-| 等待归属 | 在等谁：p91-foundation-reviewer-r5；等什么：fixed bd505d6 PASS/FAIL/INVALID；PMO 600s HAPI timer/observe |
+| 等待归属 | none; append-only product FAIL; successor hotfix owns exactly-once revision repair |
 
 ## 备注
 
@@ -46,3 +46,4 @@ Prepared from task-manifest.json. Do not hand-edit field names.
 | 2026-08-13T05:55:39+00:00 | inbox -> inbox | PMO | fresh R5 HAPI VERIFIED at correct cwd/model/effort/yolo with zero-message watermark | commit binding, fast-forward worktree, send identity bootstrap |
 | 2026-08-13T05:57:10+00:00 | inbox -> active | PMO | exact standalone R5 identity ACK observed before review commands | fast-forward activation and execute no-rm fixed bd505d6 review |
 | 2026-08-13T06:08:32+00:00 | active -> active | PMO | first 600s HAPI observe: no-rm preflight PASS; fixed bd505d6 and accepted summary hash verified; isolated editor import recorded rc=0 | continue exact-ID probe, structure, exact 22 scripts and independent 30-frame gates without PMO intervention |
+| 2026-08-13T06:31:00+00:00 | active -> failed | PMO | fresh structural probe proves open_new_session revision delta=2; evidence manifest verifies; import root removed; worktrees clean; owned Godot 0 | route bounded atomicity hotfix to original Foundation role; downstream remains frozen |
diff --git a/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md
new file mode 100644
index 00000000..72c95b1a
--- /dev/null
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md
@@ -0,0 +1,16 @@
+# Review Report: ABG-P9.1-FOUNDATION-REVIEW-R5
+
+`ABG-P9.1-FOUNDATION-REVIEW-R5 FAIL: successful-command revision invariant (open_new_session revision delta=2, expected 1)`
+
+- Reviewer HAPI: `6fac5053-6144-4bfd-944d-b131988066cd` (archived).
+- Immutable candidate: `bd505d6188556b5d407bebe9769d1c99e74dc9c1`.
+- Earliest product boundary: one successful `open_new_session` command advances revision twice.
+- Fresh runtime observation: `revision_before=0`, `revision_after=2`, `screen=first_mission`.
+- Cause: `reset_transient()` increments revision before `_change_screen() -> _success()` increments it again.
+- Evidence: `/private/tmp/abg-p91-foundation-r5-evidence.UYsX7a/terminal.txt` (`ae6045c523036e2aeb075303980d8145cdba5961d5b54b8cae13d38f7e510945`).
+- Evidence manifest: `9048e01d86f8c5bdaa8143ef0d4a6452d9f8556bf97dc416e9864c93c10a000b`, all 8 listed evidence rows verify.
+- Cleanup/integrity: 317/317 tracked runtime blobs match; reviewer import root absent; worktrees clean; owned Godot zero.
+
+The successor repair must change only the smallest state/service/test boundary
+needed to make every successful public command increment revision exactly once,
+while rejected commands remain snapshot/revision no-ops.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/runtime-evidence.json b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/runtime-evidence.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/runtime-evidence.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/runtime-evidence.json
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/context.md b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/context.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/context.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/context.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/dispatch.md b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/dispatch.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/dispatch.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/dispatch.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/goal.md b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/goal.md
similarity index 92%
rename from .agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/goal.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/goal.md
index b9746b47..53863359 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/goal.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/goal.md
@@ -94,3 +94,10 @@ foundation extraction 4-6h; exact regression and presentation gate 1-2h; confide
 - Exact-ID gate: frozen IDs accepted/stored/emitted; legacy IDs rejected by the domain boundary; legacy leaks zero.
 - Exact 22 scripts and four 844x390 / 30-frame comparisons pass again; clean/upstream; no owned process.
 - Open gate: fresh R2 independent review.
+
+## Final Independent Review Result
+
+- Fixed candidate `bd505d6` failed R5 at the earliest structural contract boundary.
+- One successful `open_new_session` command increments revision twice; expected exactly once.
+- R5 evidence: `/private/tmp/abg-p91-foundation-r5-evidence.UYsX7a/terminal.txt`, SHA-256 `ae6045c523036e2aeb075303980d8145cdba5961d5b54b8cae13d38f7e510945`.
+- This Goal exhausted its two product candidates. A new bounded successor Goal owns the atomicity repair; historical candidates remain append-only.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/ledger.md b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/ledger.md
similarity index 83%
rename from .agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/ledger.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/ledger.md
index 8655d29c..00d0053d 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/ledger.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/ledger.md
@@ -4,7 +4,7 @@
 |---|---|
 | 任务 ID | ABG-P9.1-RUNTIME-FOUNDATION |
 | Goal ref | task:ABG-P9.1-RUNTIME-FOUNDATION |
-| Goal current path | queue/active/ABG-P9.1-RUNTIME-FOUNDATION/goal.md |
+| Goal current path | queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/goal.md |
 | Context manifest | context.md |
 | Context revision | p91-runtime-foundation-r4 |
 | Role ref | role:p91-runtime-foundation-developer |
@@ -16,14 +16,14 @@
 | Frozen spec | .agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2 |
 | Graph node | .agent-taskgraph/graph.yaml#p91_runtime_foundation |
 | 依赖/路由 | needs: p91_spec_integration; PASS -> p91_domain_implementation; FAIL -> failed; max_attempts=2 |
-| 状态 | active |
+| 状态 | failed |
 | 负责人 | p91-runtime-foundation-developer |
 | 分配理由 | 职责匹配 |
 | 轮次 | product 2/2; dispatch recovery 4; prior recovery work zero-write |
 | 开始时间 | 2026-08-13T01:31:53+00:00 |
-| 最后更新 | 2026-08-13T04:45:08+00:00 |
-| 验收结果 | ATTEMPT-2 CANDIDATE READY bd505d6188556b5d407bebe9769d1c99e74dc9c1; four-file exact-ID repair; fresh R2 review pending |
-| 日志指针 | repaired evidence /tmp/abg-p91-foundation-id-repair-final.HQdpxC; exact IDs accepted/stored/emitted=2, legacy rejected=2/leaks=0; 22/22 strict-clean; 30 frames byte-identical; R1 FAIL retained separately |
+| 最后更新 | 2026-08-13T06:31:00+00:00 |
+| 验收结果 | FAIL after attempt-2: R5 proves open_new_session revision delta=2; exactly-once command revision invariant violated |
+| 日志指针 | developer evidence /tmp/abg-p91-foundation-id-repair-final.HQdpxC; R5 FAIL /private/tmp/abg-p91-foundation-r5-evidence.UYsX7a/terminal.txt SHA-256 ae6045c523036e2aeb075303980d8145cdba5961d5b54b8cae13d38f7e510945 |
 | Runtime requested | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime observed | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime verification | VERIFIED |
@@ -32,7 +32,7 @@
 | Dispatch bootstrap | dispatch.md |
 | Dispatch message | SENT: dispatch:ABG-P9.1-RUNTIME-FOUNDATION:attempt-4 via HAPI c70ab47f after pre-redispatch verification 41d0e0b0 |
 | Identity ACK | VERIFIED: IDENTITY_READY dispatch_id=dispatch:ABG-P9.1-RUNTIME-FOUNDATION:attempt-4 role=role:p91-runtime-foundation-developer team_revision=rev-p9.1-1 goal=task:ABG-P9.1-RUNTIME-FOUNDATION context_revision=p91-runtime-foundation-r4 |
-| 等待归属 | 在等谁：ABG-P9.1-FOUNDATION-REVIEW-R2；等什么：fixed bd505d6 fresh PASS/FAIL/INVALID；Domain/UI/Test remain frozen |
+| 等待归属 | none; original Goal exhausted two product candidates; successor ABG-P9.1-FOUNDATION-ATOMICITY-H1 owns bounded repair |
 
 ## 备注
 
@@ -53,3 +53,4 @@ Prepared from task-manifest.json. Do not hand-edit field names.
 | 2026-08-13T04:12:33+00:00 | active -> active | PMO | candidate c33c304 legal terminal; clean/upstream; 13 owned paths; 22/22 strict-clean; independent 30-frame developer comparison | start fresh visible fixed-source Foundation reviewer; do not open downstream yet |
 | 2026-08-13T04:31:03+00:00 | active -> active | PMO | Foundation reviewer FAIL: frozen IDs retain_loan/add_recruit differ from new domain API IDs retain_item/recruit_rear | same Goal attempt-2: repair domain IDs, keep legacy IDs only as one-way facade translation, rerun all evidence |
 | 2026-08-13T04:45:08+00:00 | active -> active | PMO | repaired candidate bd505d6 clean/upstream; exact-ID negative gate, 22/22 and 30-frame evidence pass | start fresh R2 fixed-source reviewer; do not open downstream |
+| 2026-08-13T06:31:00+00:00 | active -> failed | PMO | R5 fresh runtime probe proves open_new_session revision delta=2; two product candidates exhausted | create bounded atomicity successor Goal on same persistent Foundation role; downstream frozen |
diff --git a/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/report.md b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/report.md
new file mode 100644
index 00000000..16449f29
--- /dev/null
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/report.md
@@ -0,0 +1,12 @@
+# Completion Report: ABG-P9.1-RUNTIME-FOUNDATION
+
+`ABG-P9.1-RUNTIME-FOUNDATION redesign required: successful-command revision atomicity`
+
+- Candidate 1 `c33c304` failed frozen Guild response IDs.
+- Candidate 2 `bd505d6` repaired IDs and passed developer 22-script/30-frame evidence.
+- Independent R5 then proved `open_new_session` advances revision by `2`, not exactly `1`.
+- R5 terminal evidence SHA-256: `ae6045c523036e2aeb075303980d8145cdba5961d5b54b8cae13d38f7e510945`.
+- Original two-candidate Goal is closed. Product source remains clean/upstream on its development branch.
+
+Route: bounded successor `ABG-P9.1-FOUNDATION-ATOMICITY-H1`; Domain/UI/Test
+remain frozen until its candidate independently passes.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/runtime-evidence.json b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/runtime-evidence.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/runtime-evidence.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/runtime-evidence.json
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/task-manifest.json b/.agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/task-manifest.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-RUNTIME-FOUNDATION/task-manifest.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-RUNTIME-FOUNDATION/task-manifest.json
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/context.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/context.md
new file mode 100644
index 00000000..bc0edf67
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/context.md
@@ -0,0 +1,29 @@
+# Context Manifest: ABG-P9.1-FOUNDATION-ATOMICITY-H1
+
+> Task ID: `ABG-P9.1-FOUNDATION-ATOMICITY-H1`
+> Revision: `p91-foundation-atomicity-h1`
+> Mode: `balanced`
+> Budget exception: `none`
+
+## 必须读取（默认不超过 8 项）
+
+| 路径或稳定引用 | Revision / 范围 | 为什么本 Goal 必须读 |
+|---|---|---|
+| `AGENTS.md` | bd505d6 | development, evidence and source-ownership boundaries |
+| `.agent-taskgraph/PROJECT.md` | P9.1 profile | runtime, worktree and downstream freeze |
+| `.agent-taskgraph/spec.md` | p9.1-spec-r2 | frozen milestone scope |
+| `docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md` | p9.1-contract-r2 | atomic command/revision and exact-ID authority |
+| `.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md` | terminal ae6045c5 | fresh reproduction and exact failed boundary |
+| `runtime/domain/p9_1/session_state.gd` | bd505d6 | current revision mutation owner |
+| `runtime/domain/p9_1/session_service.gd` | bd505d6 | public command transaction owner |
+| `/private/tmp/abg-p9-0r10-regression-r2.4fxrTu/summary.txt` | sha256 3de791bb6da14be19d97c194368cd14bc8bfb906013470e81b6e12da83736bf7 | exact accepted 22-script regression authority |
+
+## 按需检索（先搜索，再局部读取）
+
+| 路径/范围 | 触发条件 | 检索提示 |
+|---|---|---|
+| source tree | Goal 需要实现细节时 | 先 rg，再局部读取 |
+
+## 最近 Delta
+
+- 2026-08-13T06:38:21+00:00: structured pre-dispatch manifest created.
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/dispatch.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/dispatch.md
new file mode 100644
index 00000000..30138fc5
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/dispatch.md
@@ -0,0 +1,21 @@
+# Dispatch Bootstrap: ABG-P9.1-FOUNDATION-ATOMICITY-H1
+
+| Field | Value |
+|---|---|
+| Task ID | ABG-P9.1-FOUNDATION-ATOMICITY-H1 |
+| Dispatch ID | dispatch:ABG-P9.1-FOUNDATION-ATOMICITY-H1:attempt-1 |
+| Role ref | role:p91-runtime-foundation-developer |
+| Role profile | roles/p91-runtime-foundation-developer/ROLE.md |
+| Role lifecycle | persistent |
+| Team revision | rev-p9.1-1 |
+| Goal ref | task:ABG-P9.1-FOUNDATION-ATOMICITY-H1 |
+| Context manifest | context.md |
+| Context revision | p91-foundation-atomicity-h1 |
+| Continuity | original Foundation Goal closed after two candidates; continue same clean worktree from rejected bd505d6 with R5 evidence ae6045c5 |
+| Session ID | PENDING |
+| Expected identity ACK | IDENTITY_READY dispatch_id=dispatch:ABG-P9.1-FOUNDATION-ATOMICITY-H1:attempt-1 role=role:p91-runtime-foundation-developer team_revision=rev-p9.1-1 goal=task:ABG-P9.1-FOUNDATION-ATOMICITY-H1 context_revision=p91-foundation-atomicity-h1 |
+| Delivery | NOT_SENT |
+| Identity ACK | PENDING |
+| ACK evidence | PENDING |
+
+Read Role, PROJECT, context, Goal and direct evidence in that order. Return the exact identity ACK before executing the Goal.
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/goal.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/goal.md
new file mode 100644
index 00000000..bc4aa3f4
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/goal.md
@@ -0,0 +1,72 @@
+# Goal: Repair Foundation successful-command revision atomicity
+
+> Stage: foundation-atomicity-hotfix
+> Started: 2026-08-13T06:38:21+00:00
+> Task ID: `ABG-P9.1-FOUNDATION-ATOMICITY-H1`
+> Baseline: `bd505d6188556b5d407bebe9769d1c99e74dc9c1; branch=agent/abg-p91-runtime-foundation; clean`
+> Frozen spec: `.agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2`
+> Graph node: `.agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1`
+> Independent contract: 不适用
+> Context manifest: `context.md`
+> Context revision: `p91-foundation-atomicity-h1`
+> Legal terminal: **ABG-P9.1-FOUNDATION-ATOMICITY-H1 candidate ready** 或 **ABG-P9.1-FOUNDATION-ATOMICITY-H1 redesign required: <最早失败边界>**
+
+## Objective
+
+Repair the rejected bd505d6 Foundation so each successful public FirstSessionService command increments revision exactly once and every rejected command preserves both snapshot and revision. Add a focused pure-domain regression covering open_new_session plus all public command success/rejection paths. Preserve frozen Guild IDs, compatibility behavior, accepted values/timing/pixels, all existing tests and the extracted ownership model. Produce one new clean/upstream candidate and fresh evidence; do not implement downstream P9.1 gameplay.
+
+## 图输入、输出与写入范围
+
+- 直接依赖（needs）：p91_runtime_foundation R5 product FAIL at bd505d6
+- 必须读取（consumes）：bd505d6 rejected source, R5 terminal ae6045c5, p9.1-contract-r2, accepted exact 22-script authority
+- 必须产出（produces）：Foundation atomicity repair candidate with focused regression and fresh evidence
+- 唯一写入范围（writes）：runtime/domain/p9_1/session_state.gd, runtime/domain/p9_1/session_service.gd, runtime/tests/p9_1/foundation_atomicity_test.gd
+- 路由：PASS -> p91_domain_implementation；FAIL -> failed；最大尝试 1
+
+## 分配记录
+
+- Role ref：`role:p91-runtime-foundation-developer`
+- 角色职责：Repair one exactly-once revision transaction boundary without changing accepted P9.0 behavior
+- 角色生命周期：persistent
+- 派给：p91-runtime-foundation-developer
+- 分配理由：职责匹配
+- 连续性：original Foundation Goal closed after two candidates; continue same clean worktree from rejected bd505d6 with R5 evidence ae6045c5
+- 工作区：`/Users/wusumac/Documents/game/tmp/aetherbound-guild-worktrees/p91-runtime-foundation`（分支：`agent/abg-p91-runtime-foundation`）
+- Runtime requested：`runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible`
+- Runtime observed：`PENDING`
+- Runtime verification：`PENDING`
+- Session evidence：`PENDING`
+- Dispatch bootstrap：`dispatch.md`
+- Dispatch message：`NOT_SENT`
+- Identity ACK：`PENDING`
+- 完整启动方式：派发预览批准后由所选 runtime 控制面生成
+
+## 报告协议
+
+- 完成、失败或阻塞时通知 PMO，并引用任务号、legal terminal 和证据路径。
+- worker 不修改 PMO 管理的 queue ledger、STATUS 或角色注册表。
+
+## 验收标准（证据门）
+
+- [ ] Add a focused pure-domain matrix proving every public successful command increments revision by exactly 1 and every rejected command preserves revision and snapshot
+- [ ] Repair the smallest state/service boundary; no compatibility, UI, asset, content, value, timing or unrelated refactor
+- [ ] Reprove frozen retain_loan/add_recruit acceptance and legacy-ID rejection/leak zero
+- [ ] Run the exact accepted 22 P9.0R1-R10 scripts serially with one marker each and strict diagnostics zero
+- [ ] Rerun the four named 844x390 groups totaling 30 frames and prove byte-identical behavior against the accepted Foundation baseline
+- [ ] Commit and push only owned paths; worktree clean/upstream; no owned process; report candidate ready for fresh independent review
+
+## Frozen（禁止触碰，明确列出）
+
+- Do not implement arbitrary-party downstream Domain/UI/Test gameplay, new screens, content or presentation
+- Do not change frozen IDs, compatibility behavior, product values, timing, copy, assets, node names or existing accepted assertions
+- Do not edit PMO TaskGraph, checkpoint, ledger, packaging, devices, stores or release files
+- Do not reuse R5 execution evidence as candidate evidence; all H1 commands, logs and captures must bind to the new source
+
+## Estimate
+
+inspection/focused regression 30-60m; minimal repair 15-30m; exact-ID and 22 scripts 30-60m; 30-frame comparison 45-90m; confidence high
+
+## 完成时交付
+
+- graph 节点约定的 produces
+- 验收证据与残余风险
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/ledger.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/ledger.md
new file mode 100644
index 00000000..e50c6ddb
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/ledger.md
@@ -0,0 +1,45 @@
+# 台账记录：ABG-P9.1-FOUNDATION-ATOMICITY-H1
+
+| 字段 | 值 |
+|---|---|
+| 任务 ID | ABG-P9.1-FOUNDATION-ATOMICITY-H1 |
+| Goal ref | task:ABG-P9.1-FOUNDATION-ATOMICITY-H1 |
+| Goal current path | queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/goal.md |
+| Context manifest | context.md |
+| Context revision | p91-foundation-atomicity-h1 |
+| Role ref | role:p91-runtime-foundation-developer |
+| Role lifecycle | persistent |
+| Role profile | roles/p91-runtime-foundation-developer/ROLE.md |
+| Role continuity | original Foundation Goal closed after two candidates; continue same clean worktree from rejected bd505d6 with R5 evidence ae6045c5 |
+| Reviewer Role ref | PENDING |
+| Reviewer Role profile | PENDING |
+| Frozen spec | .agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2 |
+| Graph node | .agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1 |
+| 依赖/路由 | needs: p91_runtime_foundation R5 product FAIL at bd505d6; PASS -> p91_domain_implementation; FAIL -> failed; max_attempts=1 |
+| 状态 | inbox |
+| 负责人 | p91-runtime-foundation-developer |
+| 分配理由 | 职责匹配 |
+| 轮次 | 1 |
+| 开始时间 | 2026-08-13T06:38:21+00:00 |
+| 最后更新 | 2026-08-13T06:38:21+00:00 |
+| 验收结果 | PENDING |
+| 日志指针 | PENDING |
+| Runtime requested | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
+| Runtime observed | PENDING |
+| Runtime verification | PENDING |
+| Session ID | PENDING |
+| Runtime evidence | PENDING |
+| Dispatch bootstrap | dispatch.md |
+| Dispatch message | NOT_SENT |
+| Identity ACK | PENDING |
+| 等待归属 | 在等谁：PMO；等什么：spawn + runtime verification + IDENTITY_READY；静默 5 分钟必须诊断并告知 Owner |
+
+## 备注
+
+Prepared from task-manifest.json. Do not hand-edit field names.
+
+## 状态转换历史（追加式）
+
+| 时间 | from -> to | 操作者 | 依据/证据 | 唯一下一步 |
+|---|---|---|---|---|
+| 2026-08-13T06:38:21+00:00 | created -> inbox | PMO | structured manifest | run pre-dispatch validation |
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/task-manifest.json b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/task-manifest.json
new file mode 100644
index 00000000..719c7082
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-ATOMICITY-H1/task-manifest.json
@@ -0,0 +1,102 @@
+{
+  "task_id": "ABG-P9.1-FOUNDATION-ATOMICITY-H1",
+  "title": "Repair Foundation successful-command revision atomicity",
+  "stage": "foundation-atomicity-hotfix",
+  "baseline": "bd505d6188556b5d407bebe9769d1c99e74dc9c1",
+  "branch": "agent/abg-p91-runtime-foundation",
+  "worktree": "/Users/wusumac/Documents/game/tmp/aetherbound-guild-worktrees/p91-runtime-foundation",
+  "frozen_spec": ".agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2",
+  "graph_node": ".agent-taskgraph/graph.yaml#p91_foundation_atomicity_h1",
+  "context_revision": "p91-foundation-atomicity-h1",
+  "context_mode": "balanced",
+  "context_items": [
+    {
+      "path": "AGENTS.md",
+      "revision": "bd505d6",
+      "reason": "development, evidence and source-ownership boundaries"
+    },
+    {
+      "path": ".agent-taskgraph/PROJECT.md",
+      "revision": "P9.1 profile",
+      "reason": "runtime, worktree and downstream freeze"
+    },
+    {
+      "path": ".agent-taskgraph/spec.md",
+      "revision": "p9.1-spec-r2",
+      "reason": "frozen milestone scope"
+    },
+    {
+      "path": "docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md",
+      "revision": "p9.1-contract-r2",
+      "reason": "atomic command/revision and exact-ID authority"
+    },
+    {
+      "path": ".agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R5/report.md",
+      "revision": "terminal ae6045c5",
+      "reason": "fresh reproduction and exact failed boundary"
+    },
+    {
+      "path": "runtime/domain/p9_1/session_state.gd",
+      "revision": "bd505d6",
+      "reason": "current revision mutation owner"
+    },
+    {
+      "path": "runtime/domain/p9_1/session_service.gd",
+      "revision": "bd505d6",
+      "reason": "public command transaction owner"
+    },
+    {
+      "path": "/private/tmp/abg-p9-0r10-regression-r2.4fxrTu/summary.txt",
+      "revision": "sha256 3de791bb6da14be19d97c194368cd14bc8bfb906013470e81b6e12da83736bf7",
+      "reason": "exact accepted 22-script regression authority"
+    }
+  ],
+  "role_id": "p91-runtime-foundation-developer",
+  "role_lifecycle": "persistent",
+  "role_responsibility": "Repair one exactly-once revision transaction boundary without changing accepted P9.0 behavior",
+  "role_continuity": "original Foundation Goal closed after two candidates; continue same clean worktree from rejected bd505d6 with R5 evidence ae6045c5",
+  "runtime_requested": {
+    "runtime": "hapi",
+    "flavor": "codex",
+    "model": "gpt-5.6-sol",
+    "effort": "xhigh",
+    "permission": "yolo",
+    "visibility": "visible"
+  },
+  "objective": "Repair the rejected bd505d6 Foundation so each successful public FirstSessionService command increments revision exactly once and every rejected command preserves both snapshot and revision. Add a focused pure-domain regression covering open_new_session plus all public command success/rejection paths. Preserve frozen Guild IDs, compatibility behavior, accepted values/timing/pixels, all existing tests and the extracted ownership model. Produce one new clean/upstream candidate and fresh evidence; do not implement downstream P9.1 gameplay.",
+  "needs": [
+    "p91_runtime_foundation R5 product FAIL at bd505d6"
+  ],
+  "consumes": [
+    "bd505d6 rejected source",
+    "R5 terminal ae6045c5",
+    "p9.1-contract-r2",
+    "accepted exact 22-script authority"
+  ],
+  "produces": [
+    "Foundation atomicity repair candidate with focused regression and fresh evidence"
+  ],
+  "writes": [
+    "runtime/domain/p9_1/session_state.gd",
+    "runtime/domain/p9_1/session_service.gd",
+    "runtime/tests/p9_1/foundation_atomicity_test.gd"
+  ],
+  "pass_route": "p91_domain_implementation",
+  "fail_route": "failed",
+  "max_attempts": 1,
+  "acceptance": [
+    "[ ] Add a focused pure-domain matrix proving every public successful command increments revision by exactly 1 and every rejected command preserves revision and snapshot",
+    "[ ] Repair the smallest state/service boundary; no compatibility, UI, asset, content, value, timing or unrelated refactor",
+    "[ ] Reprove frozen retain_loan/add_recruit acceptance and legacy-ID rejection/leak zero",
+    "[ ] Run the exact accepted 22 P9.0R1-R10 scripts serially with one marker each and strict diagnostics zero",
+    "[ ] Rerun the four named 844x390 groups totaling 30 frames and prove byte-identical behavior against the accepted Foundation baseline",
+    "[ ] Commit and push only owned paths; worktree clean/upstream; no owned process; report candidate ready for fresh independent review"
+  ],
+  "frozen": [
+    "Do not implement arbitrary-party downstream Domain/UI/Test gameplay, new screens, content or presentation",
+    "Do not change frozen IDs, compatibility behavior, product values, timing, copy, assets, node names or existing accepted assertions",
+    "Do not edit PMO TaskGraph, checkpoint, ledger, packaging, devices, stores or release files",
+    "Do not reuse R5 execution evidence as candidate evidence; all H1 commands, logs and captures must bind to the new source"
+  ],
+  "estimate": "inspection/focused regression 30-60m; minimal repair 15-30m; exact-ID and 22 scripts 30-60m; 30-frame comparison 45-90m; confidence high"
+}
diff --git a/.agent-taskgraph/roles/p91-foundation-reviewer-r5/ROLE.md b/.agent-taskgraph/roles/p91-foundation-reviewer-r5/ROLE.md
index b663ca4e..3e85b596 100644
--- a/.agent-taskgraph/roles/p91-foundation-reviewer-r5/ROLE.md
+++ b/.agent-taskgraph/roles/p91-foundation-reviewer-r5/ROLE.md
@@ -6,13 +6,13 @@
 | Team revision | rev-p9.1-1 |
 | Origin | initial:p9.1-spec-r2 |
 | 生命周期 | task-scoped |
-| 状态 | assigned |
+| 状态 | retired |
 | 核心职责 | Independently review immutable bd505d6 using a no-rm, execution-control-compatible Bash harness |
 | 负责范围 | Fixed source bd505d6 and reviewer-owned isolated temporary evidence |
 | 明确不负责 | Product repair, repository/ref writes, downstream implementation, packaging or release |
-| 当前 Goal | task:ABG-P9.1-FOUNDATION-REVIEW-R5 |
-| 当前 Session ID | 6fac5053-6144-4bfd-944d-b131988066cd |
-| 连续性记录 | Fresh tool-policy recovery after R4 INVALID; no prior reviewer execution evidence reuse |
+| 当前 Goal | none |
+| 当前 Session ID | none |
+| 连续性记录 | R5 product FAIL: open_new_session increments revision twice; evidence ae6045c5; HAPI archived |
 | 最后更新 | 2026-08-13 / PMO |
 
 ## 连续性历史
@@ -21,3 +21,4 @@
 |---|---|---|---|---|
 | 2026-08-13T05:47:00Z | task:ABG-P9.1-FOUNDATION-REVIEW-R5 | PENDING | available -> reserved | fixed bd505d6; no-rm Bash preflight required |
 | 2026-08-13T05:57:10Z | task:ABG-P9.1-FOUNDATION-REVIEW-R5 | 6fac5053-6144-4bfd-944d-b131988066cd | reserved -> assigned | exact identity ACK verified; fixed-source review activated |
+| 2026-08-13T06:31:00Z | none | 6fac5053-6144-4bfd-944d-b131988066cd | assigned -> retired | product FAIL at exactly-once revision invariant; HAPI archived |
diff --git a/.agent-taskgraph/roles/p91-runtime-foundation-developer/ROLE.md b/.agent-taskgraph/roles/p91-runtime-foundation-developer/ROLE.md
index b122e8b2..bf1f05bf 100644
--- a/.agent-taskgraph/roles/p91-runtime-foundation-developer/ROLE.md
+++ b/.agent-taskgraph/roles/p91-runtime-foundation-developer/ROLE.md
@@ -6,11 +6,17 @@
 | Team revision | rev-p9.1-1 |
 | Origin | initial:p9.1-spec-r1 |
 | 生命周期 | persistent |
-| 状态 | assigned |
+| 状态 | reserved |
 | 核心职责 | Extract behavior-equivalent shared runtime state and extension APIs |
 | 负责范围 | Goal-defined foundation paths and shared entry during its exclusive stage |
 | 明确不负责 | Product redesign, PMO state, packaging or release |
-| 当前 Goal | task:ABG-P9.1-RUNTIME-FOUNDATION |
-| 当前 Session ID | c70ab47f-b764-42a1-b4b5-2eab342e8b25 |
-| 连续性记录 | attempts 1-3 ended before product writes; attempt-4 is a clean redispatch from contract-r2 and source e9fe1bc |
+| 当前 Goal | task:ABG-P9.1-FOUNDATION-ATOMICITY-H1 |
+| 当前 Session ID | PENDING |
+| 连续性记录 | Original Foundation exhausted two candidates; H1 starts from rejected bd505d6 and owns only exactly-once revision repair |
 | 最后更新 | 2026-08-13 / PMO |
+
+## 连续性历史
+
+| 时间 | Goal | Session ID | 状态变化 | handoff / 证据 |
+|---|---|---|---|---|
+| 2026-08-13T06:31:00Z | task:ABG-P9.1-FOUNDATION-ATOMICITY-H1 | PENDING | assigned -> reserved | R5 FAIL ae6045c5; reuse same clean worktree and persistent role for bounded successor |