§25. Changes from v4.2

planarian @ a924e09 · Spec v4.6 · snapshot main · all versions

• §9: base_source (owner source with base override) separated from staged_source (candidate tree); stale check compares the working tree to base_source only; both bound to the token; Git-revision wording removed; step numbering fixed.
• §9/§12: build roots its own output under gcroots/planarian/builds/ without a lease; the transaction adopts the root; orphan roots cleaned at startup.
• §12: durable OpId journaled before every mutating call and tagged onto the backend job; quiescence covers jobs discovered by jobs_tagged for unacknowledged ops; a backend that cannot say → RecoveryFailed.
• §12/§12c: RecoveryFailed sets a persisted recovery interlock carried in the checkpoint; cleared only by administrator planarian resolve; crash table row for Checking, ReobserveOnly.
• Consistency: ProbeRole, canonical-probe paragraph, and agent instruction 4 all carry the Measurement exception; I12’s terminal set includes Rejected and Cancelled.
• I4 reworded to applicable Readiness probes; atomic transaction creation with initial lease; Rejected/Cancelled terminal states; incident closure on the desired predicate; SessionEstablished scoped to user-class sessions and a specific session id; intent-case scoring scoped to autonomous action.