diff --git a/.agent-taskgraph/ROLES.md b/.agent-taskgraph/ROLES.md
index d11be5e2..1a1d6460 100644
--- a/.agent-taskgraph/ROLES.md
+++ b/.agent-taskgraph/ROLES.md
@@ -15,7 +15,8 @@
 | p91-independent-reviewer | P9.1 独立 reviewer | task-scoped | retired | 固定 revision 只读审查 | none | none | 2026-08-13 |
 | p91-foundation-reviewer-r2 | P9.1 Foundation 复审 | task-scoped | retired | 固定修复 revision 从零复审 | none | none | 2026-08-13 |
 | p91-foundation-reviewer-r3 | P9.1 Foundation 环境恢复复审 | task-scoped | retired | 固定 bd505d6 从零复审，修正 reviewer import/probe 环境 | none | none | 2026-08-13 |
-| p91-foundation-reviewer-r4 | P9.1 Foundation Bash 复审 | task-scoped | assigned | 固定 bd505d6 从零复审，使用预检后的 bash harness | task:ABG-P9.1-FOUNDATION-REVIEW-R4 | ee11bb17-2e42-4779-883e-5d36cf9bb590 | 2026-08-13 |
+| p91-foundation-reviewer-r4 | P9.1 Foundation Bash 复审 | task-scoped | retired | 固定 bd505d6 从零复审，使用预检后的 bash harness | none | none | 2026-08-13 |
+| p91-foundation-reviewer-r5 | P9.1 Foundation no-rm 复审 | task-scoped | reserved | 固定 bd505d6 从零复审，使用执行控制允许的 find-delete Bash harness | task:ABG-P9.1-FOUNDATION-REVIEW-R5 | PENDING | 2026-08-13 |
 | p91-h5-publisher | P9.1 H5 发布员 | task-scoped | available | 固定源 Web 导出与 Gallery 发布 | PENDING | PENDING | 2026-08-13 |
 
 ## 编制变更历史
@@ -27,3 +28,4 @@
 | 2026-08-13 | rev-p9.1-1 | Foundation reviewer 等量替换 R1 -> R2 | 冻结 graph 的 fresh independent reviewer 要求；R1 已退休 | R2 固定 `bd505d6`，新会话/上下文/证据，writes=none |
 | 2026-08-13 | rev-p9.1-1 | Foundation reviewer 环境恢复 R2 -> R3 | R2 在产品断言前 harness INVALID；自动相同边界恢复 | R3 固定同一 `bd505d6`，fresh session/archive，writes=none |
 | 2026-08-13 | rev-p9.1-1 | Foundation reviewer Bash 恢复 R3 -> R4 | R3 在产品门前 zsh wrapper INVALID；自动环境恢复 | R4 强制 `/bin/bash` + preflight，固定 `bd505d6`，writes=none |
+| 2026-08-13 | rev-p9.1-1 | Foundation reviewer tool-policy 恢复 R4 -> R5 | R4 在 Bash/Godot 前因 `rm` 风格清理被执行控制拒绝；自动环境恢复 | R5 禁止 `rm`/`unlink`，只用前缀保护的绝对路径和 `find -depth -delete`，固定 `bd505d6`，writes=none |
diff --git a/.agent-taskgraph/STATUS.md b/.agent-taskgraph/STATUS.md
index 118feba9..810f6838 100644
--- a/.agent-taskgraph/STATUS.md
+++ b/.agent-taskgraph/STATUS.md
@@ -3,15 +3,15 @@
 | 任务 ID | 标题 | 状态 | 负责人 | 轮次 | 最后更新 | 卡点 |
 |---|---|---|---|---|---|---|
 
-| ABG-P9.1-RUNTIME-FOUNDATION | P9.1 behavior-equivalent runtime foundation extraction | active | p91-runtime-foundation-developer | product 2/2 / recovery 4 | 2026-08-13T04:45:08Z | repaired candidate bd505d6 ready; R4 review active |
+| ABG-P9.1-RUNTIME-FOUNDATION | P9.1 behavior-equivalent runtime foundation extraction | active | p91-runtime-foundation-developer | product 2/2 / recovery 4 | 2026-08-13T04:45:08Z | repaired candidate bd505d6 ready; R5 review recovery pending |
 
-| ABG-P9.1-FOUNDATION-REVIEW-R4 | Independently review P9.1 Foundation with Bash harness | active | p91-foundation-reviewer-r4 | 1 | 2026-08-13T05:37:05Z | exact identity ACK verified; fixed-source review active |
+| ABG-P9.1-FOUNDATION-REVIEW-R5 | Independently review P9.1 Foundation with no-rm Bash harness | inbox | p91-foundation-reviewer-r5 | 1 | 2026-08-13T05:54:26Z | preparing 0/1: session not created |
 
 ## 当前批次总结
 
 - 批次：`abg-p9-1-continuous-development-01`。
 - 已完成：三份专家规格已推送；PMO 当前冻结 authority 为 `p9.1-contract-r2`（权威 22-test baseline）。
 - 视觉切片：candidate `0c640eb` 已作为 `71b7f71` 集成；六帧 844x390，付费使用 0/4、USD 0/5，Owner visual gate 仍开放。
-- 当前 Gate：R3 在产品门前 zsh harness INVALID；fresh R4 Bash reviewer 已激活，固定源仍为 `bd505d6`，下游冻结。
-- PMO 监控循环：`RUNNING`，目标 HAPI `ee11bb17-2e42-4779-883e-5d36cf9bb590`，间隔 600 秒；wait=真实 timer/observe cell，observe=`inspect_peer` + ledger。
+- 当前 Gate：R4 在 Bash/Godot 前因执行控制拒绝 `rm` 风格清理而 INVALID；准备 fresh R5 no-rm reviewer，固定源仍为 `bd505d6`，下游冻结。
+- PMO 监控循环：`EXITED`，原因：R4 legal INVALID terminal observed；R5 激活后重新登记 600 秒循环。
 - 结束 Gate：独立 reviewer PASS 后发布新 H5，Owner 再判断理解、乐趣和继续意愿。
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/context.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/context.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/context.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/context.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/dispatch.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/dispatch.md
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/dispatch.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/dispatch.md
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md
similarity index 88%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md
index a2cef492..c6e84284 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md
@@ -70,3 +70,12 @@ bash preflight 5m; environment/exact-ID/structure 45m; 22 scripts 30-60m; 30 fra
 
 - graph 节点约定的 produces
 - 验收证据与残余风险
+
+## Review Terminal
+
+- `ABG-P9.1-FOUNDATION-REVIEW-R4 INVALID: mandatory no-Godot preflight was rejected by execution control before /bin/bash ran`.
+- Fixed candidate: `bd505d6188556b5d407bebe9769d1c99e74dc9c1`.
+- Earliest boundary: execution control rejected an `rm -f`-style cleanup operation before the required Bash preflight launched.
+- No Godot, exact-ID, structural, 22-script or 30-frame product judgment was made.
+- Evidence: `/private/tmp/abg-p91-foundation-r4-invalid.a7KTuc/terminal.txt`, SHA-256 `f689a9b386034c2c2653aca35fa3fc13904ec903dfc4cdac39c517b4f1043f3f`.
+- Repository and refs remained unchanged; no owned Godot/product process started; HAPI archived by PMO.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/ledger.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/ledger.md
similarity index 76%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/ledger.md
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/ledger.md
index ba7cf659..70da43d8 100644
--- a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/ledger.md
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/ledger.md
@@ -4,7 +4,7 @@
 |---|---|
 | 任务 ID | ABG-P9.1-FOUNDATION-REVIEW-R4 |
 | Goal ref | task:ABG-P9.1-FOUNDATION-REVIEW-R4 |
-| Goal current path | queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md |
+| Goal current path | queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/goal.md |
 | Context manifest | context.md |
 | Context revision | p91-foundation-review-r4 |
 | Role ref | role:p91-foundation-reviewer-r4 |
@@ -16,14 +16,14 @@
 | Frozen spec | .agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2 |
 | Graph node | .agent-taskgraph/graph.yaml#p91_runtime_foundation |
 | 依赖/路由 | needs: p91_runtime_foundation repaired candidate bd505d6; PASS -> p91_domain_implementation; FAIL -> failed; max_attempts=1 |
-| 状态 | active |
+| 状态 | failed |
 | 负责人 | p91-foundation-reviewer-r4 |
 | 分配理由 | 职责匹配 |
 | 轮次 | 1 |
 | 开始时间 | 2026-08-13T05:31:51+00:00 |
-| 最后更新 | 2026-08-13T05:37:05+00:00 |
-| 验收结果 | PENDING |
-| 日志指针 | PENDING |
+| 最后更新 | 2026-08-13T05:47:00+00:00 |
+| 验收结果 | INVALID: execution control rejected rm-style cleanup before mandatory Bash preflight; no product judgment |
+| 日志指针 | /private/tmp/abg-p91-foundation-r4-invalid.a7KTuc/terminal.txt SHA-256 f689a9b386034c2c2653aca35fa3fc13904ec903dfc4cdac39c517b4f1043f3f; HAPI ee11bb17-2e42-4779-883e-5d36cf9bb590 archived |
 | Runtime requested | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime observed | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
 | Runtime verification | VERIFIED |
@@ -32,7 +32,7 @@
 | Dispatch bootstrap | dispatch.md |
 | Dispatch message | SENT: dispatch:ABG-P9.1-FOUNDATION-REVIEW-R4:attempt-1 via HAPI ee11bb17 after pre-dispatch verification e4e7a3f6 |
 | Identity ACK | VERIFIED: IDENTITY_READY dispatch_id=dispatch:ABG-P9.1-FOUNDATION-REVIEW-R4:attempt-1 role=role:p91-foundation-reviewer-r4 team_revision=rev-p9.1-1 goal=task:ABG-P9.1-FOUNDATION-REVIEW-R4 context_revision=p91-foundation-review-r4 |
-| 等待归属 | 在等谁：p91-foundation-reviewer-r4；等什么：fixed bd505d6 PASS/FAIL/INVALID；PMO 600s HAPI timer/observe |
+| 等待归属 | none; append-only INVALID_TOOL_POLICY; fresh R5 may replace only the cleanup primitive |
 
 ## 备注
 
@@ -45,3 +45,4 @@ Prepared from task-manifest.json. Do not hand-edit field names.
 | 2026-08-13T05:31:51+00:00 | created -> inbox | PMO | structured manifest | run pre-dispatch validation |
 | 2026-08-13T05:33:20+00:00 | inbox -> inbox | PMO | fresh R4 HAPI VERIFIED at correct cwd/model/effort/yolo with zero-message watermark | commit binding, fast-forward worktree, send identity bootstrap |
 | 2026-08-13T05:37:05+00:00 | inbox -> active | PMO | exact standalone R4 identity ACK observed before review commands | fast-forward activation and execute Bash-harness fixed bd505d6 review |
+| 2026-08-13T05:47:00+00:00 | active -> failed | PMO | execution control rejected rm-style cleanup before /bin/bash or Godot; terminal hash f689a9b3; no product judgment | archive HAPI; retire R4; prepare R5 with no-rm deletion primitive |
diff --git a/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/report.md b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/report.md
new file mode 100644
index 00000000..288e6e98
--- /dev/null
+++ b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/report.md
@@ -0,0 +1,15 @@
+# Review Report: ABG-P9.1-FOUNDATION-REVIEW-R4
+
+`ABG-P9.1-FOUNDATION-REVIEW-R4 INVALID: mandatory no-Godot preflight was rejected by execution control before /bin/bash ran`
+
+- Reviewer HAPI: `ee11bb17-2e42-4779-883e-5d36cf9bb590` (archived).
+- Immutable candidate: `bd505d6188556b5d407bebe9769d1c99e74dc9c1`.
+- Earliest boundary: execution control rejected an `rm -f`-style cleanup command before the Bash preflight launched.
+- Classification: reviewer tool-policy INVALID; no product PASS/FAIL.
+- Evidence: `/private/tmp/abg-p91-foundation-r4-invalid.a7KTuc/terminal.txt` (`f689a9b386034c2c2653aca35fa3fc13904ec903dfc4cdac39c517b4f1043f3f`).
+- Cleanup/integrity: no Godot/product process started; candidate and canonical worktrees stayed clean; HAPI archived.
+
+R5 must not invoke `rm`, `unlink`, or a shell alias/wrapper that expands to either.
+Its preflight and final cleanup must use an absolute reviewer-owned path under
+`/private/tmp/abg-p91-foundation-r5-*`, verify that prefix, and use
+`/usr/bin/find "$review_root" -depth -delete` directly from `/bin/bash`.
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/runtime-evidence.json b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/runtime-evidence.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/runtime-evidence.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/runtime-evidence.json
diff --git a/.agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/task-manifest.json b/.agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/task-manifest.json
similarity index 100%
rename from .agent-taskgraph/queue/active/ABG-P9.1-FOUNDATION-REVIEW-R4/task-manifest.json
rename to .agent-taskgraph/queue/failed/ABG-P9.1-FOUNDATION-REVIEW-R4/task-manifest.json
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md
new file mode 100644
index 00000000..b302b5d4
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/context.md
@@ -0,0 +1,29 @@
+# Context Manifest: ABG-P9.1-FOUNDATION-REVIEW-R5
+
+> Task ID: `ABG-P9.1-FOUNDATION-REVIEW-R5`
+> Revision: `p91-foundation-review-r5`
+> Mode: `deep`
+> Budget exception: `none`
+
+## 必须读取（默认不超过 8 项）
+
+| 路径或稳定引用 | Revision / 范围 | 为什么本 Goal 必须读 |
+|---|---|---|
+| `AGENTS.md` | bd505d6 | fixed-tester and evidence boundaries |
+| `.agent-taskgraph/PROJECT.md` | p9.1 profile | visible HAPI reviewer runtime and recovery policy |
+| `.agent-taskgraph/spec.md` | p9.1-spec-r2 | frozen P9.1 scope |
+| `docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md` | p9.1-contract-r2 | exact IDs, APIs and 22-script authority |
+| `docs/runtime/p9_1/RUNTIME_ARCHITECTURE_SPEC.md` | 7bc871d | foundation ownership requirements |
+| `candidate bd505d6188556b5d407bebe9769d1c99e74dc9c1` | fixed repaired product source | immutable candidate |
+| `failed reviewer reports R1-R4` | R1 FAIL; R2-R4 INVALID | defect to retest and reviewer harness patterns forbidden in R5 |
+| `/private/tmp/abg-p9-0r10-regression-r2.4fxrTu/summary.txt` | sha256 3de791bb6da14be19d97c194368cd14bc8bfb906013470e81b6e12da83736bf7 | exact accepted 22-script authority |
+
+## 按需检索（先搜索，再局部读取）
+
+| 路径/范围 | 触发条件 | 检索提示 |
+|---|---|---|
+| source tree | Goal 需要实现细节时 | 先 rg，再局部读取 |
+
+## 最近 Delta
+
+- 2026-08-13T05:54:26+00:00: structured pre-dispatch manifest created.
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md
new file mode 100644
index 00000000..322fd030
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/dispatch.md
@@ -0,0 +1,21 @@
+# Dispatch Bootstrap: ABG-P9.1-FOUNDATION-REVIEW-R5
+
+| Field | Value |
+|---|---|
+| Task ID | ABG-P9.1-FOUNDATION-REVIEW-R5 |
+| Dispatch ID | dispatch:ABG-P9.1-FOUNDATION-REVIEW-R5:attempt-1 |
+| Role ref | role:p91-foundation-reviewer-r5 |
+| Role profile | roles/p91-foundation-reviewer-r5/ROLE.md |
+| Role lifecycle | task-scoped |
+| Team revision | rev-p9.1-1 |
+| Goal ref | task:ABG-P9.1-FOUNDATION-REVIEW-R5 |
+| Context manifest | context.md |
+| Context revision | p91-foundation-review-r5 |
+| Continuity | fresh tool-policy recovery after R4 INVALID; no prior reviewer execution evidence reuse |
+| Session ID | PENDING |
+| Expected identity ACK | IDENTITY_READY dispatch_id=dispatch:ABG-P9.1-FOUNDATION-REVIEW-R5:attempt-1 role=role:p91-foundation-reviewer-r5 team_revision=rev-p9.1-1 goal=task:ABG-P9.1-FOUNDATION-REVIEW-R5 context_revision=p91-foundation-review-r5 |
+| Delivery | NOT_SENT |
+| Identity ACK | PENDING |
+| ACK evidence | PENDING |
+
+Read Role, PROJECT, context, Goal and direct evidence in that order. Return the exact identity ACK before executing the Goal.
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md
new file mode 100644
index 00000000..ea129ae8
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md
@@ -0,0 +1,72 @@
+# Goal: Independently review P9.1 Foundation with no-rm Bash harness
+
+> Stage: foundation-independent-rereview-r5
+> Started: 2026-08-13T05:54:26+00:00
+> Task ID: `ABG-P9.1-FOUNDATION-REVIEW-R5`
+> Baseline: `53024fb869a23b1099ed0acf7267c1d292fe7c8c; branch=review/abg-p91-foundation-r5; clean`
+> Frozen spec: `.agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2`
+> Graph node: `.agent-taskgraph/graph.yaml#p91_runtime_foundation`
+> Independent contract: 不适用
+> Context manifest: `context.md`
+> Context revision: `p91-foundation-review-r5`
+> Legal terminal: **ABG-P9.1-FOUNDATION-REVIEW-R5 PASS** 或 **ABG-P9.1-FOUNDATION-REVIEW-R5 FAIL: <最早产品/合同失败边界>** 或 **ABG-P9.1-FOUNDATION-REVIEW-R5 INVALID: <最早 reviewer 环境/工具边界>**
+
+## Objective
+
+Review immutable product candidate bd505d6188556b5d407bebe9769d1c99e74dc9c1 from zero. First run a no-Godot /bin/bash harness preflight that records false as rc=1 and proves reviewer_root cleanup using only an absolute /private/tmp/abg-p91-foundation-r5-* path, an explicit prefix guard and /usr/bin/find reviewer_root -depth -delete. Never invoke rm or unlink. Then use the same permitted primitive for fresh archive/import, annotation-free exact-ID probe, structural review, exact 22 scripts and independent four-group/30-frame gates. Report PASS, product FAIL or harness INVALID at the earliest boundary and never repair.
+
+## 图输入、输出与写入范围
+
+- 直接依赖（needs）：p91_runtime_foundation repaired candidate bd505d6
+- 必须读取（consumes）：bd505d6 fixed source, R1 FAIL, R2-R4 INVALID lessons, p9.1-contract-r2, accepted exact 22-script authority
+- 必须产出（produces）：fresh read-only PASS, FAIL or INVALID terminal with reviewer-owned evidence
+- 唯一写入范围（writes）：none in repository; reviewer-owned isolated temporary evidence only
+- 路由：PASS -> p91_domain_implementation；FAIL -> failed；最大尝试 1
+
+## 分配记录
+
+- Role ref：`role:p91-foundation-reviewer-r5`
+- 角色职责：Independently review immutable bd505d6 using a no-rm, execution-control-compatible Bash harness
+- 角色生命周期：task-scoped
+- 派给：p91-foundation-reviewer-r5
+- 分配理由：职责匹配
+- 连续性：fresh tool-policy recovery after R4 INVALID; no prior reviewer execution evidence reuse
+- 工作区：`/Users/wusumac/Documents/game/tmp/aetherbound-guild-worktrees/p91-foundation-review-r5`（分支：`review/abg-p91-foundation-r5`）
+- Runtime requested：`runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible`
+- Runtime observed：`PENDING`
+- Runtime verification：`PENDING`
+- Session evidence：`PENDING`
+- Dispatch bootstrap：`dispatch.md`
+- Dispatch message：`NOT_SENT`
+- Identity ACK：`PENDING`
+- 完整启动方式：派发预览批准后由所选 runtime 控制面生成
+
+## 报告协议
+
+- 完成、失败或阻塞时通知 PMO，并引用任务号、legal terminal 和证据路径。
+- worker 不修改 PMO 管理的 queue ledger、STATUS 或角色注册表。
+
+## 验收标准（证据门）
+
+- [ ] Run a no-Godot /bin/bash preflight that records false as rc=1 and creates/deletes a guarded absolute reviewer_root with /usr/bin/find -depth -delete; stop INVALID if it fails
+- [ ] Prove fixed product source exactly bd505d6 and clean worktrees; later PMO commits excluded
+- [ ] Fresh archive + isolated HOME/cache/TMP editor import has recorded rc=0; annotation-free exact-ID probe proves frozen IDs and legacy rejection/leaks zero
+- [ ] Review all Foundation/repair changes for composition root, thin facade, one mutable owner, atomic results, exactly-once impacts, domain purity and no downstream gameplay implementation
+- [ ] From the same imported archive run exact 22 scripts serially with one marker each and strict diagnostics zero
+- [ ] Independently regenerate/compare four 844x390 groups totaling 30 frames; verify immutable source, sanitized evidence, clean worktrees and owned cleanup
+
+## Frozen（禁止触碰，明确列出）
+
+- Do not edit, repair, stage, commit, push, merge or modify repository files or refs
+- Do not reuse developer/R1/R2/R3/R4 execution logs or captures and do not read later product changes
+- Do not invoke rm, unlink, zsh wrappers or control variables named status/path; use /bin/bash, rc/review_root and guarded /usr/bin/find -depth -delete only
+- Do not implement downstream work, generate media, package, sign, upload, publish or cross Human Gates; harness failures are INVALID
+
+## Estimate
+
+no-rm Bash preflight 5m; environment/exact-ID/structure 45m; 22 scripts 30-60m; 30 frames 45-90m; confidence high
+
+## 完成时交付
+
+- graph 节点约定的 produces
+- 验收证据与残余风险
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md
new file mode 100644
index 00000000..453158e8
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/ledger.md
@@ -0,0 +1,45 @@
+# 台账记录：ABG-P9.1-FOUNDATION-REVIEW-R5
+
+| 字段 | 值 |
+|---|---|
+| 任务 ID | ABG-P9.1-FOUNDATION-REVIEW-R5 |
+| Goal ref | task:ABG-P9.1-FOUNDATION-REVIEW-R5 |
+| Goal current path | queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/goal.md |
+| Context manifest | context.md |
+| Context revision | p91-foundation-review-r5 |
+| Role ref | role:p91-foundation-reviewer-r5 |
+| Role lifecycle | task-scoped |
+| Role profile | roles/p91-foundation-reviewer-r5/ROLE.md |
+| Role continuity | fresh tool-policy recovery after R4 INVALID; no prior reviewer execution evidence reuse |
+| Reviewer Role ref | PENDING |
+| Reviewer Role profile | PENDING |
+| Frozen spec | .agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2 |
+| Graph node | .agent-taskgraph/graph.yaml#p91_runtime_foundation |
+| 依赖/路由 | needs: p91_runtime_foundation repaired candidate bd505d6; PASS -> p91_domain_implementation; FAIL -> failed; max_attempts=1 |
+| 状态 | inbox |
+| 负责人 | p91-foundation-reviewer-r5 |
+| 分配理由 | 职责匹配 |
+| 轮次 | 1 |
+| 开始时间 | 2026-08-13T05:54:26+00:00 |
+| 最后更新 | 2026-08-13T05:54:26+00:00 |
+| 验收结果 | PENDING |
+| 日志指针 | PENDING |
+| Runtime requested | runtime=hapi; flavor=codex; model=gpt-5.6-sol; effort=xhigh; permission=yolo; visibility=visible |
+| Runtime observed | PENDING |
+| Runtime verification | PENDING |
+| Session ID | PENDING |
+| Runtime evidence | PENDING |
+| Dispatch bootstrap | dispatch.md |
+| Dispatch message | NOT_SENT |
+| Identity ACK | PENDING |
+| 等待归属 | 在等谁：PMO；等什么：spawn + runtime verification + IDENTITY_READY；静默 5 分钟必须诊断并告知 Owner |
+
+## 备注
+
+Prepared from task-manifest.json. Do not hand-edit field names.
+
+## 状态转换历史（追加式）
+
+| 时间 | from -> to | 操作者 | 依据/证据 | 唯一下一步 |
+|---|---|---|---|---|
+| 2026-08-13T05:54:26+00:00 | created -> inbox | PMO | structured manifest | run pre-dispatch validation |
diff --git a/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json
new file mode 100644
index 00000000..abf0c546
--- /dev/null
+++ b/.agent-taskgraph/queue/inbox/ABG-P9.1-FOUNDATION-REVIEW-R5/task-manifest.json
@@ -0,0 +1,101 @@
+{
+  "task_id": "ABG-P9.1-FOUNDATION-REVIEW-R5",
+  "title": "Independently review P9.1 Foundation with no-rm Bash harness",
+  "stage": "foundation-independent-rereview-r5",
+  "baseline": "53024fb869a23b1099ed0acf7267c1d292fe7c8c",
+  "branch": "review/abg-p91-foundation-r5",
+  "worktree": "/Users/wusumac/Documents/game/tmp/aetherbound-guild-worktrees/p91-foundation-review-r5",
+  "frozen_spec": ".agent-taskgraph/spec.md revision p9.1-spec-r2; docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md revision p9.1-contract-r2",
+  "graph_node": ".agent-taskgraph/graph.yaml#p91_runtime_foundation",
+  "context_revision": "p91-foundation-review-r5",
+  "context_mode": "deep",
+  "context_items": [
+    {
+      "path": "AGENTS.md",
+      "revision": "bd505d6",
+      "reason": "fixed-tester and evidence boundaries"
+    },
+    {
+      "path": ".agent-taskgraph/PROJECT.md",
+      "revision": "p9.1 profile",
+      "reason": "visible HAPI reviewer runtime and recovery policy"
+    },
+    {
+      "path": ".agent-taskgraph/spec.md",
+      "revision": "p9.1-spec-r2",
+      "reason": "frozen P9.1 scope"
+    },
+    {
+      "path": "docs/runtime/PHASE9_1_ARBITRARY_PARTY_FIRST_SESSION_CONTRACT.md",
+      "revision": "p9.1-contract-r2",
+      "reason": "exact IDs, APIs and 22-script authority"
+    },
+    {
+      "path": "docs/runtime/p9_1/RUNTIME_ARCHITECTURE_SPEC.md",
+      "revision": "7bc871d",
+      "reason": "foundation ownership requirements"
+    },
+    {
+      "path": "candidate bd505d6188556b5d407bebe9769d1c99e74dc9c1",
+      "revision": "fixed repaired product source",
+      "reason": "immutable candidate"
+    },
+    {
+      "path": "failed reviewer reports R1-R4",
+      "revision": "R1 FAIL; R2-R4 INVALID",
+      "reason": "defect to retest and reviewer harness patterns forbidden in R5"
+    },
+    {
+      "path": "/private/tmp/abg-p9-0r10-regression-r2.4fxrTu/summary.txt",
+      "revision": "sha256 3de791bb6da14be19d97c194368cd14bc8bfb906013470e81b6e12da83736bf7",
+      "reason": "exact accepted 22-script authority"
+    }
+  ],
+  "role_id": "p91-foundation-reviewer-r5",
+  "role_lifecycle": "task-scoped",
+  "role_responsibility": "Independently review immutable bd505d6 using a no-rm, execution-control-compatible Bash harness",
+  "role_continuity": "fresh tool-policy recovery after R4 INVALID; no prior reviewer execution evidence reuse",
+  "runtime_requested": {
+    "runtime": "hapi",
+    "flavor": "codex",
+    "model": "gpt-5.6-sol",
+    "effort": "xhigh",
+    "permission": "yolo",
+    "visibility": "visible"
+  },
+  "objective": "Review immutable product candidate bd505d6188556b5d407bebe9769d1c99e74dc9c1 from zero. First run a no-Godot /bin/bash harness preflight that records false as rc=1 and proves reviewer_root cleanup using only an absolute /private/tmp/abg-p91-foundation-r5-* path, an explicit prefix guard and /usr/bin/find reviewer_root -depth -delete. Never invoke rm or unlink. Then use the same permitted primitive for fresh archive/import, annotation-free exact-ID probe, structural review, exact 22 scripts and independent four-group/30-frame gates. Report PASS, product FAIL or harness INVALID at the earliest boundary and never repair.",
+  "needs": [
+    "p91_runtime_foundation repaired candidate bd505d6"
+  ],
+  "consumes": [
+    "bd505d6 fixed source",
+    "R1 FAIL",
+    "R2-R4 INVALID lessons",
+    "p9.1-contract-r2",
+    "accepted exact 22-script authority"
+  ],
+  "produces": [
+    "fresh read-only PASS, FAIL or INVALID terminal with reviewer-owned evidence"
+  ],
+  "writes": [
+    "none in repository; reviewer-owned isolated temporary evidence only"
+  ],
+  "pass_route": "p91_domain_implementation",
+  "fail_route": "failed",
+  "max_attempts": 1,
+  "acceptance": [
+    "[ ] Run a no-Godot /bin/bash preflight that records false as rc=1 and creates/deletes a guarded absolute reviewer_root with /usr/bin/find -depth -delete; stop INVALID if it fails",
+    "[ ] Prove fixed product source exactly bd505d6 and clean worktrees; later PMO commits excluded",
+    "[ ] Fresh archive + isolated HOME/cache/TMP editor import has recorded rc=0; annotation-free exact-ID probe proves frozen IDs and legacy rejection/leaks zero",
+    "[ ] Review all Foundation/repair changes for composition root, thin facade, one mutable owner, atomic results, exactly-once impacts, domain purity and no downstream gameplay implementation",
+    "[ ] From the same imported archive run exact 22 scripts serially with one marker each and strict diagnostics zero",
+    "[ ] Independently regenerate/compare four 844x390 groups totaling 30 frames; verify immutable source, sanitized evidence, clean worktrees and owned cleanup"
+  ],
+  "frozen": [
+    "Do not edit, repair, stage, commit, push, merge or modify repository files or refs",
+    "Do not reuse developer/R1/R2/R3/R4 execution logs or captures and do not read later product changes",
+    "Do not invoke rm, unlink, zsh wrappers or control variables named status/path; use /bin/bash, rc/review_root and guarded /usr/bin/find -depth -delete only",
+    "Do not implement downstream work, generate media, package, sign, upload, publish or cross Human Gates; harness failures are INVALID"
+  ],
+  "estimate": "no-rm Bash preflight 5m; environment/exact-ID/structure 45m; 22 scripts 30-60m; 30 frames 45-90m; confidence high"
+}
diff --git a/.agent-taskgraph/roles/p91-foundation-reviewer-r4/ROLE.md b/.agent-taskgraph/roles/p91-foundation-reviewer-r4/ROLE.md
index 476b596f..50c3d4f0 100644
--- a/.agent-taskgraph/roles/p91-foundation-reviewer-r4/ROLE.md
+++ b/.agent-taskgraph/roles/p91-foundation-reviewer-r4/ROLE.md
@@ -6,13 +6,13 @@
 | Team revision | rev-p9.1-1 |
 | Origin | initial:p9.1-spec-r2 |
 | 生命周期 | task-scoped |
-| 状态 | assigned |
+| 状态 | retired |
 | 核心职责 | Independently review immutable bd505d6 using a preflighted /bin/bash harness |
 | 负责范围 | Fixed source bd505d6 and reviewer-owned isolated temporary evidence |
 | 明确不负责 | Product repair, repository/ref writes, downstream implementation, packaging or release |
-| 当前 Goal | task:ABG-P9.1-FOUNDATION-REVIEW-R4 |
-| 当前 Session ID | ee11bb17-2e42-4779-883e-5d36cf9bb590 |
-| 连续性记录 | Fresh environment recovery after R2/R3 harness INVALID; no prior execution evidence reuse |
+| 当前 Goal | none |
+| 当前 Session ID | none |
+| 连续性记录 | R4 INVALID before Bash/Godot because execution control rejected rm-style cleanup; no product judgment |
 | 最后更新 | 2026-08-13 / PMO |
 
 ## 连续性历史
@@ -21,3 +21,4 @@
 |---|---|---|---|---|
 | 2026-08-13T05:29:53Z | task:ABG-P9.1-FOUNDATION-REVIEW-R4 | PENDING | available -> reserved | fixed bd505d6; /bin/bash preflight required |
 | 2026-08-13T05:37:05Z | task:ABG-P9.1-FOUNDATION-REVIEW-R4 | ee11bb17-2e42-4779-883e-5d36cf9bb590 | reserved -> assigned | exact identity ACK verified; fixed-source review activated |
+| 2026-08-13T05:47:00Z | none | ee11bb17-2e42-4779-883e-5d36cf9bb590 | assigned -> retired | INVALID_TOOL_POLICY before Bash/Godot; HAPI archived |
diff --git a/.agent-taskgraph/roles/p91-foundation-reviewer-r5/ROLE.md b/.agent-taskgraph/roles/p91-foundation-reviewer-r5/ROLE.md
new file mode 100644
index 00000000..511bd839
--- /dev/null
+++ b/.agent-taskgraph/roles/p91-foundation-reviewer-r5/ROLE.md
@@ -0,0 +1,22 @@
+# Role: P9.1 Foundation Reviewer R5
+
+| 字段 | 值 |
+|---|---|
+| Role ID | p91-foundation-reviewer-r5 |
+| Team revision | rev-p9.1-1 |
+| Origin | initial:p9.1-spec-r2 |
+| 生命周期 | task-scoped |
+| 状态 | reserved |
+| 核心职责 | Independently review immutable bd505d6 using a no-rm, execution-control-compatible Bash harness |
+| 负责范围 | Fixed source bd505d6 and reviewer-owned isolated temporary evidence |
+| 明确不负责 | Product repair, repository/ref writes, downstream implementation, packaging or release |
+| 当前 Goal | task:ABG-P9.1-FOUNDATION-REVIEW-R5 |
+| 当前 Session ID | PENDING |
+| 连续性记录 | Fresh tool-policy recovery after R4 INVALID; no prior reviewer execution evidence reuse |
+| 最后更新 | 2026-08-13 / PMO |
+
+## 连续性历史
+
+| 时间 | Goal | Session ID | 状态变化 | handoff / 证据 |
+|---|---|---|---|---|
+| 2026-08-13T05:47:00Z | task:ABG-P9.1-FOUNDATION-REVIEW-R5 | PENDING | available -> reserved | fixed bd505d6; no-rm Bash preflight required |
diff --git a/.agent-taskgraph/staffing/ABG-P9.1-FOUNDATION-REVIEW-R5.md b/.agent-taskgraph/staffing/ABG-P9.1-FOUNDATION-REVIEW-R5.md
new file mode 100644
index 00000000..1469a217
--- /dev/null
+++ b/.agent-taskgraph/staffing/ABG-P9.1-FOUNDATION-REVIEW-R5.md
@@ -0,0 +1,19 @@
+# Staffing Change: Foundation Reviewer R5 Tool-Policy Recovery
+
+> Team revision: `rev-p9.1-1 -> rev-p9.1-1`
+> Status: `APPLIED`
+> Type: `REPLACE`
+> Proposed by: `PMO / 2026-08-13T05:47:00Z`
+> Approved by: `PROJECT.md environment recovery policy and Owner instruction to continue`
+
+R4 stopped INVALID before `/bin/bash` and before all product gates because its
+preflight command contained an `rm -f`-style cleanup operation rejected by the
+execution control. R5 is an equal reviewer replacement: fixed `bd505d6`, writes
+none, fresh HAPI/session/archive/evidence. It must prohibit `rm` and `unlink`,
+verify an absolute `/private/tmp/abg-p91-foundation-r5-*` prefix, and use
+`/usr/bin/find "$review_root" -depth -delete` directly from `/bin/bash` for its
+preflight and final cleanup. Graph/spec/source/permissions/concurrency are
+unchanged.
+
+Rollback: any preflight/runtime/identity failure leaves R5 inbox or INVALID and
+does not modify product source. Final result: `APPLIED / pre-dispatch`.