[houlianpi]

Requirement

Closes the integration portion of #61; continues the post-merge acceptance tracked by #50.

User-visible result

Main receives the reviewed single canonical autogenesis Skill, authenticated internal references, evidence-driven readiness, exact BDD execution/generation separation, recovery rules, and the final Contract identity.

Scope

• Merge exact integration head ecffe6ad045ff8eed6cde43a73ac4d6aacce45e8.
• Carry PR Optimize canonical AutoGenesis Skill from evidence #62 unchanged from feature/agent-integration-v3 to main.
• Preserve the existing [Capability]: Skill-led readiness and MCP Runtime lifecycle #50 Runtime lifecycle implementation already on main.

Non-goals

• No package, Registry, immutable asset, or GitHub Release publication.
• No claim that native interactive Windows acceptance passed.
• No additional source changes or version assignment.

Interface changes

• Agent Contract 2.1.0 adds authenticated references and Contract.read_reference(id).
• CLI adds autogenesis reference <id> --json.
• Canonical Skill SHA-256: ef1a1bdf49f4a96593c229ebdabb79f9d589336f3c7ca6de179a8f240f685aae.
• Contract manifest SHA-256: 89ec8f67dfbb9522eb3138488fbaf2b823abf5ed42b3140a82abfc45a883e98a.

Acceptance scenarios

Given the exact reviewed integration Candidate
When it is merged to main for native Windows retrieval
Then its bytes and identities remain unchanged
And native Windows acceptance remains pending rather than reported as passed
And no release publication occurs

Verification evidence

Check	Result	Evidence
Prompt/Skill eval	Pass	Runtime 13/13, Skill 15/15, zero regressions
Source verification	Pass	Contract 218; CLI 33; Appium Runtime 33; Candidate channel 3
Clean-wheel verification	Pass	221/221 at MCP 1.23.0 and 221/221 at MCP 1.29.1
CI	Pass	PR #62: 27/27 checks
Native Windows	Pending	Mandatory post-merge/pre-release Notepad acceptance under #50

Agent roles and review gate

• Implementer: GitHub Copilot coding agent session
• Independent correctness reviewer: APPROVE, no blocking findings
• Independent security reviewer: SECURITY_APPROVE, no findings
• Human Product Owner: explicitly authorized merge-first sequencing on 2026-11-06 so Windows can retrieve from main
• Native Windows acceptor: pending; remains a release gate

Security review

• Secrets and sensitive inputs are excluded from durable evidence.
• File writes remain scoped and atomic under the current Runtime contract.
• Process arguments are not shell-interpolated.
• Authenticated reference allowlisting and identities were independently reviewed.
• Native Windows interactive acceptance pending.

Compatibility impact

Main will expose the reviewed source Candidate for Windows acceptance. Public packages still carry prior immutable assets until a separately authorized release. Coding Agent compatibility #21-#24 remains blocked.

Rollback

Revert this integration merge. The isolated #61 merge remains ecffe6a; its implementation commit is f9c928e.

Known limitations

• Native Windows Notepad acceptance is pending.
• [Security] Bind generated writes to trusted approval and directory handles #51 trusted host/UI approval and race-free generated writes remain unresolved.
• README PR Redesign README for Agent-first onboarding #29 and public release coordinates remain blocked.

Definition of Done

• Scope and non-goals preserved.
• Exact reviewed Candidate selected.
• Independent correctness and security review passed.
• Prompt comparison attached to PR Optimize canonical AutoGenesis Skill from evidence #62.
• Human Product Owner authorized merge-first sequencing.
• Native Windows post-merge acceptance passed.
• Publication authorized.

[houlianpi]

All integration CI checks passed. Merging exact head ecffe6a under the Human Product Owner merge-first sequencing decision. Native interactive Windows acceptance remains pending and blocks release, not source retrieval from main.