Preserve valid roles while retiring invalid responsibility
Aegis v2.9.2 adds lightweight governance guidance for repairs where one identifier, path, event, or carrier can serve multiple roles.
Highlights
- Adds a bounded preservation reminder for identity, selector, precedence, scope, and role-binding changes.
- Requires the repair direction to name evidence-backed behavior that must remain correct, the highest-risk counterexample, and material unknown or uninspected surfaces.
- Makes role-before-value reasoning explicit when the same value can be a target, scope, comparison member, or collection boundary in different demands.
- Refines dual-track governance so invalid authority or responsibility is retired without deleting a separately evidenced legitimate capability on the same carrier.
- Avoids assuming exhaustive discovery of implicit consumers or preserved behavior; uncertainty is exposed instead of hidden.
- Keeps this method-layer discipline lightweight: no universal artifact, new TDD risk signal, automatic regression-scope expansion, or authoritative runtime gate.
- Adds deterministic workflow-quality coverage for multi-role repair and responsibility-level retirement.
Verification
- Workflow-quality, boundary-compliance, governance-completion, Codex-skill-parser, Codex plugin-sync, host-instruction-invariant, JSON, diff, and version-audit checks passed.
- The full E2E command was run through Git Bash. Governance completion, Layer 2, and Layer 3 passed; Layer 1 passed 39 checks.
- Two Layer 1 checks remained environment-bound on this Windows host: the offline Codex benchmark fixture is unsupported, and the nested Codex smoke sandbox could not start PowerShell (
Windows error 5). - The same natural
brainstormingsmoke succeeded through the host boundary without the nested sandbox restriction, loadingbrainstorming/SKILL.mdfrom the v2.9.2 candidate and returning the expected first workflow step.