XOS-146 — codi in-message status header: no-fabricate / no-silent-drop

New Stop hook status-liveness-check.ts verifies the model-authored Protocol 1
header against ~/.codialectic/state.json using the SAME freshness rule as
statusline.sh (XOS-141) — one shared rule, so the in-message header and the
terminal status line can never disagree. A score may appear only when codi is
LIVE (fresh last_protocol_ts within the liveness window, version==installed_version,
active); otherwise the header must be '⚠ Codi DEGRADED · [HH:MM]' with no numbers.

Catches: fabrication (score-shaped token, with or without Cal:, while DEGRADED),
inconsistent (rendered score != state last_score/last_cal), silent-drop (LIVE but
no header), missing-degraded-header. Fail-open split: response unreadable → exit 0
silent; state.json missing/corrupt → treat as DEGRADED and still evaluate.
Protocol 1 contract reworded in SKILL.md + SKILL-lite.md.

Cross-family judge: GREEN (Gemini-Flash + Gemini-Pro tiebreaker; gpt-5.4 drove
rounds 1-3 fixes). Version 4.27.0 across all 5 sources + root CHANGELOG.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: thewhycyborg

.claude-plugin/marketplace.json

@@ -11,8 +11,8 @@
     {
       "name": "co-dialectic",
       "source": "./plugins/co-dialectic",
-      "description": "Co-Dialectic v4.23.0 - FORAGE: Epistemic Foraging flywheel. Weekly /forage tool-discovery loop: FORAGE (marketplace diff + GitHub trending + recommender + P20 web sweep) -> SCORE against the week's WORKSPACE session-ledger friction (not novelty) -> VERIFY in a throwaway worktree -> PROPOSE (install HUMAN-GATED, no auto-install; per-candidate approval ticket with evidence + rollback, max 3/run) -> CODIFY (pending/keepers/rejects/deferred + memory entry + audit ticket).",
-      "version": "4.26.0",
+      "description": "Co-Dialectic v4.27.0 - XOS-146 in-message status header liveness. status-liveness-check Stop hook verifies Protocol 1 headers every turn, blocks fabricated score prose via deterministic nudges, requires rendered score/Cal to match the fresh heartbeat in ~/.codialectic/state.json, and forces DEGRADED headers to omit all score numbers.",
+      "version": "4.27.0",
       "category": "productivity"
     },
     {

CHANGELOG.md

@@ -6,6 +6,10 @@
 All notable changes to this repository are tracked here. This project follows [Semantic Versioning](https://semver.org/).
 
 ---
+## [4.27.0] — 2026-06-29 — XOS-146: in-message status header liveness
+
+Co-Dialectic now verifies the model-authored Protocol 1 header every turn. New Stop hook `hooks/status-liveness-check.ts` reads the final assistant message plus the same `~/.codialectic/state.json` liveness source and rule used by `statusline.sh` (one shared freshness rule, so the in-message header and the terminal status line can never disagree): a score may appear only when codi is LIVE (fresh `last_protocol_ts` within the liveness window, `version` == `installed_version`, `active` true). It recognizes only anchored Protocol 1 LIVE/DEGRADED header grammar (persona-led, optional `[HH:MM]`), nudges on fabricated score-shaped tokens — with or without `Cal:` — while DEGRADED, catches score/Cal mismatches against the heartbeat, reports silent drops of the required header, and distinguishes two error paths: a response that cannot be read → fail open silently (exit 0, no nudge); missing/corrupt `state.json` → treat as DEGRADED and STILL evaluate the rendered header. The Protocol 1 contract (SKILL.md + SKILL-lite.md) is reworded to match: when DEGRADED, render `⚠ Codi DEGRADED · [HH:MM]` with no percentages, never invented/recalled from prose.
+
 ## [4.26.0] — 2026-06-29 — XOS-141: structural liveness (hook-rendered status + fail-LOUD + self-resurrect)
 
 codi liveness made structural so the status line can never silently show a frozen/false-alive snapshot. `~/.codialectic/state.json` split into hook-owned fields (`installed_version`, `last_session_start_ts`, refreshed every SessionStart) vs model-owned (`last_protocol_ts`, score, persona — shown only when fresh). statusline.sh renders `⚠ Codi DEGRADED` on stale/version-skew/inactive instead of a frozen score. install-survival-layer.sh: create-if-missing → idempotent read-merge-write sync + corrupt-state fail-safe (backup before recreate, never silent-wipe of model fields). user-prompt-submit.ts deterministically detects degradation + injects a re-activation nudge (does not write last_protocol_ts). Protocol 1 writes the model-side heartbeat.

docs/plans/codi-status-no-fabricate.md

@@ -0,0 +1,89 @@
+# Codi in-message status header — no-fabricate / no-silent-drop
+
+status: design
+slug: codi-status-no-fabricate
+ticket: XOS-146
+repo: ~/aiprojects/prompt-engineering-in-action (plugins/co-dialectic)
+
+## What
+
+Make codi's **in-message** status header (`{icon} {Persona} · X% · Cal: Y% · [HH:MM]`,
+Protocol 1) impossible to fabricate or silently drop. XOS-141 fixed the **terminal**
+statusLine (hook-owned, fail-loud); this fixes the **other** surface — the line the
+model types at the top of every response, which is currently model-authored prose with
+no grounded source.
+
+## Why
+
+2026-06-29, live proof: codi was dead the whole session (`~/.codialectic/state.json`
+frozen, `last_protocol_ts` null, cache stale), yet the model TYPED `91% · Cal 95%`
+headers with invented numbers, then silently dropped the header partway through, and
+mistook its own performance for codi running. The terminal statusLine being reliable
+does not help — the in-message header the user actually reads can still lie or vanish.
+Anchors: Zero-Hallucination (don't fabricate the score), verification-before-completion,
+[[feedback_dont_perform_a_dead_feature]].
+
+## Scope
+
+- **In:**
+  - Contract rewrite in `SKILL.md` + `SKILL-lite.md` Protocol 1: a score `%`/`Cal:%`
+    may appear ONLY when codi is live (a fresh `last_protocol_ts` heartbeat was written
+    THIS turn AND the rendered numbers equal the `last_score`/`last_cal` just written).
+    When DEGRADED (stale/absent `last_protocol_ts`, or `installed_version` skew) → header
+    MUST read `⚠ Codi DEGRADED · [HH:MM]` with NO numbers. Never invent / recall a score
+    from re-injected prose. `[HH:MM]` is always OS-grounded (Protocol 17).
+  - NEW deterministic **Stop hook** `hooks/status-liveness-check.ts` (wired in
+    `hooks.json`, following the existing `peer-parity-nudge.ts` Stop-hook pattern):
+    reads the model's final assistant message + `state.json`, computes liveness, and
+    emits a LOUD deterministic nudge on any of the three failure modes (below). This is
+    the codification — replaces "the agent notices the drop" with a hook that always
+    checks. Reuses the SAME freshness rule as `statusline.sh` (XOS-141) so the two
+    surfaces can never disagree (extract/share the freshness predicate; if bash↔TS
+    sharing is impractical, replicate the exact same threshold + skew rule and assert
+    it in a test).
+  - Tighten the `user-prompt-submit.ts` survival reminder text to state the contract
+    explicitly ("a score requires a fresh heartbeat you write THIS turn; else
+    `⚠ Codi DEGRADED`, never a %").
+  - Version bump 4.27.0 across all 4 sources + root CHANGELOG + SKILL-lite.
+- **Out:**
+  - Deprecating the in-message header entirely in favor of the terminal statusLine
+    (ticket direction 4) — bigger UX call; the contract + Stop hook make the in-message
+    surface trustworthy without removing it. Noted as a future option, not this ticket.
+  - Any change to the XOS-141 `statusline.sh` behavior (only share its freshness rule).
+  - Any phone-home / telemetry. Local-only, as always.
+
+## Acceptance criteria
+
+- [ ] In-message header shows `X%`/`Cal: Y%` ONLY when `last_protocol_ts` is fresh AND
+      the rendered numbers equal `state.json` `last_score`/`last_cal`.
+- [ ] When codi is DEGRADED (stale/absent `last_protocol_ts` or version skew), the
+      correct header is `⚠ Codi DEGRADED · [HH:MM]` with no numbers — documented in
+      Protocol 1 (SKILL.md + SKILL-lite.md).
+- [ ] `hooks/status-liveness-check.ts` (Stop hook) deterministically emits a loud nudge on:
+      (a) **fabrication** — a numeric score present in the response but state NOT fresh;
+      (b) **inconsistent** — rendered number ≠ `state.json` `last_score`/`last_cal`;
+      (c) **silent drop** — state IS fresh but the response has no status line.
+      No nudge when the DEGRADED header is correct, or when fresh + numbers match.
+- [ ] The Stop hook fails safe: missing/corrupt `state.json` → treat as DEGRADED
+      (expect DEGRADED header), never crash.
+- [ ] Freshness predicate matches `statusline.sh` (XOS-141); a test asserts they agree.
+- [ ] Version 4.27.0 in: `.claude-plugin/marketplace.json`, `plugins/co-dialectic/.claude-plugin/plugin.json`,
+      `plugins/co-dialectic/skills/co-dialectic/SKILL.md` `**Version:**`, `install.sh` `VERSION=`,
+      and `SKILL-lite.md` `**Version:**`; root `CHANGELOG.md` `## [4.27.0]` entry.
+- [ ] `test-plugin.sh` validate green; `gh pr checks` green.
+
+## Test plan
+
+- [ ] `bun test` unit tests for `status-liveness-check.ts` covering the 4 cases
+      (fresh+match → no nudge; stale+number → fabrication nudge; mismatch → inconsistent
+      nudge; fresh+no-line → silent-drop nudge) + fail-safe on missing state.json.
+- [ ] Freshness-parity test: same (last_protocol_ts, now, installed_version) inputs →
+      same live/degraded verdict as the statusline.sh rule.
+- [ ] CLI render smoke (Stage 5.5 plugin/CLI mode): hooks load + run without stack traces
+      at narrow + standard widths; the new hook handles absent state.json gracefully.
+
+## Rollback
+
+Revert the PR; remove the `status-liveness-check` entry from `hooks.json`. Additive hook
++ doc edits in one plugin; no data migration; low blast radius. The terminal statusLine
+(XOS-141) is unaffected, so liveness signalling never regresses below today.

install.sh

@@ -6,7 +6,7 @@
 set -e
 
 REPO="https://raw.githubusercontent.com/Exponential-OS/prompt-engineering-in-action/main"
-VERSION="4.26.0"
+VERSION="4.27.0"
 CONFIG_DIR="$HOME/.co-dialectic"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" 2>/dev/null && pwd || pwd)"
 TARGET_ARG="auto"

plugins/co-dialectic/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "co-dialectic",
-  "description": "Co-Dialectic v4.26.0 - XOS-141 structural liveness. statusLine gates model-owned score fields behind a fresh Protocol 1 heartbeat, hook-owned installed_version/session-start fields refresh every SessionStart, stale/skew/inactive state fails loud as DEGRADED, and UserPromptSubmit injects a deterministic Protocol 0/1 self-resurrection nudge without faking last_protocol_ts.",
-  "version": "4.26.0",
+  "description": "Co-Dialectic v4.27.0 - XOS-146 in-message status header liveness. status-liveness-check Stop hook verifies Protocol 1 headers every turn, blocks fabricated score prose via deterministic nudges, requires rendered score/Cal to match the fresh heartbeat in ~/.codialectic/state.json, and forces DEGRADED headers to omit all score numbers.",
+  "version": "4.27.0",
   "depends_on_kernel": [
     "brain-kernel >= 1.0.0",
     "co-dialectic >= 4.16.0"

plugins/co-dialectic/hooks/hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "Co-Dialectic hooks — persistent survival + dev-cycle visibility + foundation invariant harnesses + auto-handoff before compaction. SessionStart auto-installs survival layer. UserPromptSubmit re-injects codi context + OS-grounded datetime (temporal-grounding harness). PreToolUse(Skill) emits plugin+version+scope banner. PreToolUse(Edit/Write/MultiEdit) fires the codify-or-mark-uncodified scan on .md files in invariant-carrier locations. Stop hook fires the unit-of-work-commit reminder when workspace cwd has uncommitted changes. PreCompact hook (v4.21.0+) auto-triggers the codi-handoff skill before context summarization. TaskCompleted hook (v4.22.0+) runs the cross-family judge-panel cascade on agent-team task completions — opt-in via CODI_TEAM_JUDGE_GATE=1; exit 2 blocks completion and feeds jurors' flags back to the teammate.",
+  "description": "Co-Dialectic hooks — persistent survival + dev-cycle visibility + foundation invariant harnesses + auto-handoff before compaction. SessionStart auto-installs survival layer. UserPromptSubmit re-injects codi context + OS-grounded datetime (temporal-grounding harness). PreToolUse(Skill) emits plugin+version+scope banner. PreToolUse(Edit/Write/MultiEdit) fires the codify-or-mark-uncodified scan on .md files in invariant-carrier locations. Stop hooks verify the in-message status header liveness and fire the unit-of-work-commit reminder when workspace cwd has uncommitted changes. PreCompact hook (v4.21.0+) auto-triggers the codi-handoff skill before context summarization. TaskCompleted hook (v4.22.0+) runs the cross-family judge-panel cascade on agent-team task completions — opt-in via CODI_TEAM_JUDGE_GATE=1; exit 2 blocks completion and feeds jurors' flags back to the teammate.",
   "hooks": {
     "SessionStart": [
       {
@@ -53,6 +53,11 @@
     "Stop": [
       {
         "hooks": [
+          {
+            "type": "command",
+            "command": "/Users/anandvallam/.bun/bin/bun run \"${CLAUDE_PLUGIN_ROOT}/hooks/status-liveness-check.ts\"",
+            "timeout": 3000
+          },
           {
             "type": "command",
             "command": "/Users/anandvallam/.bun/bin/bun run \"${CLAUDE_PLUGIN_ROOT}/hooks/unit-of-work-check.ts\"",