diff --git a/tests/runner-e2e/chat-full-catalog-testops-manifest.json b/tests/runner-e2e/chat-full-catalog-testops-manifest.json
index 2d6ba461e5b..9c228aa07f7 100644
--- a/tests/runner-e2e/chat-full-catalog-testops-manifest.json
+++ b/tests/runner-e2e/chat-full-catalog-testops-manifest.json
@@ -1,6 +1,6 @@
 {
   "schema": "paperclip.chat-full-catalog-testops-manifest/v1",
-  "targetSha": "58449c4ecd7fd374f21f175411ef3249f55c18a3",
+  "targetSha": "5f74dc6545ea66ac71255ac8e6010f5215a1f257",
   "metadataSourceSha": "de0941835cc8f0d01c982574ee258e110babdbeb",
   "profile": "runner-opencode",
   "model": "openrouter/deepseek/deepseek-v4.1-flash-1017",
@@ -172,7 +172,7 @@
       "baseTargetSha": "3b66c3c144360ddf32714a0742fd774b8ceafb16",
       "previousTargetSha": "ab2019e976076ec0eb60b026844f3d9211cb0208",
       "definitionSourceSha": "de0941835cc8f0d01c982574ee258e110babdbeb",
-      "candidateDescriptorSha256": "53a1bff62126c268919640339fc1430d1fb74bd3cda00614803a876c9443a8c8",
+      "candidateDescriptorSha256": "913090f18cc4e0f7d997b99586618080f1b5c847b2b5d74984d3c480baf5318d",
       "changedDefinitionFiles": [
         {
           "path": "tests/runner-e2e/chat-scenarios/companies.yaml",
@@ -199,7 +199,7 @@
           "sha256": "91a9ddc4f5357f19a2cdc73ff8a090c741d14780e4ed502c856ebd557986f7e1"
         }
       ],
-      "conditions": "Historical qualification conditions (retained; statements that all requests or sourceFiles remain fixed refer to those earlier successors): New candidate measurements only. Original definitions, prior failed attempts and source6 ab201 remain historical. This target retains that catalog and integrates merged runtime fixes #18711, #18713 and #18718, with the prior-run restoration condition adapted to its existing owner. It adds the reviewed previous-question locator, attributed human-only denial and conditional-outcome oracle, and actor-sensitive timeline narrative/recorded-reassignment fixes. Closed finish diagnostics retain an effective schema digest, hashed call correlation and bounded type/category enums only. Historical MCP timeout and continuation-shape causes remain unresolved; no new all-ten PASS is claimed. Queries, model, human/native counts and original clocks remain fixed; the earlier Studio144 explicit 2..3 accounting stays. Core PRs18717/18734/18742 are now merged. SDK115 completion remains UNKNOWN and the other five SDK cases remain held. Full244 runtime catalog is not merged to master and the196/244 gate is unchanged. This successor binds the seven reviewed scenario repairs plus framework evidence: canonical skill navigation, original announcement phase clock, attributed timeline context, bound hire revision history, credential warning and configuration-question admission, completed team visibility, and canonical private framework evidence. Twelve declaration fields across eleven cases change only oracle versions and skill source-file provenance. All original requests, setup, human/native bounds, model and clocks remain fixed. Historical failed attempts and missing-original UNKNOWN grades remain unchanged; no uniform-ten PASS is claimed. The existing SDK506/efa qualification is reused only for byte-identical registered source inputs. This next successor adds reviewed question-surface observation, grounded scenario grading and safe credential-guidance boundaries after the retained uniform attempt. Eleven existing oracle-version leaves advance; all sourceFiles declarations, requests, setup, counts, clocks, model, launcher and private protocol helpers remain fixed. Component qualification does not attest a new uniform-ten pass.\n\nPrevious successor conditions (retained): This successor measures five reviewed repairs at the retained original model and bounds. Exactly one request is clarified: multipart53 now explicitly asks to walk through the visible form; its original broad request and failures4623/4717 remain historical. The previous inventory0cf530 is retained and the disclosed clarified inventory is814bb363. Other243 catalog requests are unchanged. The company-secret second human message now references the actual saved non-secret metadata instead of repeating the initial request; native continuation must remain attributed to the actual agent. Five oracle-version leaves and four source-file additions change; launcher, private helpers, SDK506/efa, identities, counts, clocks and the196/244 gate remain fixed. All five successor journeys remain unrun; component proof is not a PASS. For Team610, independently saved canonical skill/version/member proof establishes recovery; no required recovery-success phrase is imposed. A contradictory current denial still fails. If the required skill remains missing, truthful disclosure of that condition remains required.\n\nPrevious retained successor conditions: This target adds the reviewed personal secure-entry confirmation handoff, the typographic team partial-warning observer correction, and the company-secret authorization fix from unmerged core PR #19325. Personal v10 retains two declared logical human actions: one canonical chat request plus one independently verified same-human secure-save confirmation handoff. Raw chat comments remain one. Team v5 accepts the actual named-skill warning with a typographic apostrophe; saved-state, repeat, runtime, link, and false-success checks remain required. The company route returns scoped 403 guidance before malformed-body validation and preserves board-only creation. Its effect on the unfinished native turn is unproven. The three affected journeys are unrun on this target. Existing failed attempts remain failed. All queries, expected outcomes, native and human bounds, clocks, profile, model, launcher, private protocol, SDK506/efa, and the 196/244 admission gate remain fixed, including the recorded case53 query clarification. Local component proof is not native feature qualification or main/core merge credit.\n\nPrevious retained successor conditions: This target repairs personal secure-entry observation and truthful human acknowledgment, company secure-entry language and ordinary visible menu navigation, team current-skill claim attribution, and native completion feedback that asks for usable product links. Personal v11 expands visible Details before entry when needed, binds the exact value-entry dialog instead of the underlying definition sheet, and sends a truthful secure-save acknowledgment on the plain-comment path. The latter path was not reached by the prior failed attempt. Company v9 and the four shared-language consumers v5 keep explicit non-chat exclusions local to secure entry. Team v6 retains independent saved-state proof and rejects contradictory current claims. The source includes the separately reviewed, unmerged completion-feedback core hunk. All affected native journeys remain unrun on this target; original failures remain failed. The prior personal first native took580602ms, so completion within the unchanged660s remains unproven. Queries, counts, clocks, model, retries, SDK506/efa, launcher and private transfer interfaces are unchanged from the previous target; the recorded case53 clarification remains retained. Local control proof is not native PASS or a core merge.\n\nPrevious retained successor conditions: This unrun successor adds only the reviewed Company reference, credential-request and actor-boundary corrections plus Team current-assertion temporal scoping. Canonical server default reference metadata is accepted without accepting unknown fields or relaxed policy. Independent unsafe transfer requests remain rejected. Team current denials cannot be hidden by unrelated historical recovery prose. Versions and descriptor bytes are unchanged from the previous unrun target. The six changed source files pass233 affected controls and full E2E types. All prior native failures and the personal latency limitation remain. All queries, run counts, clocks, model, retries, launcher, SDK506 and private interfaces remain unchanged.\n\nPrevious retained successor conditions: This final reviewed successor adds only bounded Team historical-assertion scope, the actual visible Account-menu path to Company settings, and nearest secure-destination attribution with ordinary secure page/form suffixes. Current contradictions and intervening public destinations remain rejected. The six changed source paths pass271 affected controls, two offline browser canaries and full E2E types. Descriptor bytes and unrun versions remain unchanged. All original failures, queries, counts, clocks, model, retries, SDK506, launcher, production inputs and private interfaces are retained. Native acceptance remains unproved until the next actual run.\n\nPrevious retained successor conditions: The measured parent reached seven independently reviewed passes out of ten. This successor changes only author-skill observation and the staged unsafe credential destination guard. Author v5 accepts proven author-only self-use without inventing assignment requirements, but preserves explicit global-assignment denial and source/resource proof. Shared guard semantics are versioned once across all six declared dependents: company v10, personal v12, and four external v6 consumers. The seven descriptor changes are oracle-version leaves only. All 244 YAML identities, queries, context, expected outcomes, native/human bounds, clocks, credentials, model, SDK506, launcher and private interfaces remain unchanged. Local qualification passes214 affected controls and full E2E types. These versions remain native-unrun. Timeline and company native noncompletion remain unresolved; this source makes no latency or concurrency fix claim. The isolated company concurrency diagnostic run42124035785 remains a separate measurement. All original failures remain failed.\n\nPrevious retained successor conditions: The isolated company attempt5055 failed after a succeeded255949ms native turn produced a valid actor-bound secure saved-name question with a non-secret proposed metadata default. The previous oracle rejected any initialText. This successor admits only blank or bounded metadata defaults in the company saved-secret-name variant and verifies the same canonical payload in independent human accounting. Company v11 is native-unrun. Secure entry and the second native were not reached in the failed original. This is an assertion repair, not a runtime, latency or concurrency fix. All244 definitions retain their queries, contexts, expected outcomes, native/human bounds, clocks, credentials and model. The parent full-ten remains seven of ten measured passes. New local qualification passes286 distinct affected controls and full E2E types; SDK506, launcher and private interfaces remain unchanged. All failed originals stay failed.\n\nPrevious retained successor conditions: This successor scopes the Company private-entry observer to the actual Create secret dialog. A successful201 closes that form while opening a separate details Sheet; the old generic dialog locator could rebind and wait on the wrong Sheet. The actual worker-branch model-free canary proves successful creation with details still open and rejects failed POST or missing form. Full E2E types pass;286 unchanged functional controls are reused. Company v11 and descriptor bytes remain unchanged and native-unrun. No actual private Company save failure is claimed from the prior pre-entry attempt. The earlier CI runner shutdown cancellations and the test573 deferred-observer assertion are retained and unresolved; this observer repair makes no claim to fix them. New normal CI remains required. All244 conditions, queries, counts, clocks, credentials, model, SDK506, trusted private protocol and launcher remain unchanged.\n\nPrevious retained successor conditions: This target retains D1 and adds two evidence-backed assertion/setup repairs. Timeline v11 accepts a completed saved artifact edit with an immediately bound command Result bullet; actual5056 fully described the ordered history but remains originally FAILED. Company v12 accepts only the actual governed secret-binding approval after secure save, with current-person/question/payload/resolver/audit/continuation and saved binding proof. Its conditions explicitly change from exactly two native runs to minimum two, maximum three, and from two base human inputs to those same two plus at most one independently verified UI approval (maximum three actual human inputs). The original 480000ms Company attempt is unchanged. Actual5057 retained a saved secret and pending binding approval, remains FAILED, and did not prove native3 completion. All244 queries, model, clocks, credentials and other case bounds remain unchanged. The controller native partition is explicitly capped at two as a bounded lower-concurrency experiment, not a demonstrated performance or reliability fix; external serialization remains. Next selected466+578 experiment and later full ten remain UNRUN. SDK506, launcher and private evidence wire are unchanged; source contract/flow accounting and the static case-only marker change explicitly. No core or catalog merge/PASS is claimed.\n\nPrevious retained successor conditions: Company v13 admits the actual bound metadata-only environment-name question from failed5059 without requiring an agent-authored validation pattern or exact prompt template. Canonical human answers must pass bounded environment-name validation and any supplied pattern. Secure entry, actor/source/payload/audit/continuation, optional governance and final binding proof remain required. The separately reviewed unmerged interaction-accept core overlay omits only its redundant resolution notifier; the executed card and bound wake remain, other Settings/API notifications stay unchanged. The separately reviewed unmerged API-search overlay removes general function words from ranking so ordinary resource discovery is not displaced. Its effect on timeline noncompletion is unproven. SourceFiles explicitly declare both core dependencies. Company retains minimum 2/maximum 3 native runs, two base human inputs plus only one independently verified governance approval, and 480000ms. Timeline retains 3 native/1 human/720000ms. All244 current YAML queries, contexts and outcomes, model, clocks, credentials and other bounds remain byte-identical to the prior target; the disclosed case53 clarification remains. SDK506 inputs, launcher and protected evidence wire are unchanged. Current original5059 and5060 remain FAILED; these corrections are native-unrun and no full-ten PASS or core/catalog merge is claimed. The two-case lower-concurrency experiment remains capped at2, retries0.\n\nCurrent successor conditions: This source changes only the timeline declaration from v11 to v12 and its bounded textual recognition. The original result 5094 CEO completed a truthful ordered account in 248876ms; all three native runs succeeded and ten other original checks passed, but the original settled grade remains FAILED. Camel exitCode syntax and an omitted command subject immediately after the same worker-labeled bullet caused the narrative assertion failure. The reviewed correction preserves actor, bullet/heading, intent, nonzero outcome, chronology and independent source/native checks. Local 300 controls, full E2E types and SDK506 guard pass; this is not a native v12 PASS. Original Company result 5093 had first-CEO noncompletion and remains FAILED; its model/runtime timing cause is unresolved and this target makes no Company behavior or latency fix claim. Root plans one full-ten bounded measurement on this coherent source at cap2, zero retries, original model and all original clocks; no query, human/native accounting or permission is waived. The previous Company v13 minimum 2/maximum 3 native runs, two base human inputs plus at most one independently verified UI approval, and 480000ms remain explicit. Timeline retains 3 native/1 human/720000ms. All 244 YAML requests, contexts, outcomes and other conditions remain unchanged. Launcher, protected evidence wire and SDK506/efa inputs are unchanged. The interaction-accept and API-search production overlays remain separately reviewed, unmerged core PRs; neither the core nor the full catalog 196/244 gate is merged by this pin. Historical failed grades remain unchanged. No deterministic timing, reliability or all-ten PASS is claimed.\n\nCurrent successor conditions (f5692c57): Prior conditions above describe retained historical attempts and sources. This target retains source936c and adds reviewed Company ACK-card handling with exact current-person/card/proposal/response and secure-entry bindings, Company and Personal negated-request corrections, and the585 negated-completion preview correction. Team610 now serves the accepted package through a disposable derived catalog with only selected OpenCode profile/account metadata changed: other file bytes and non-runtime sidecar fields remain unchanged, original/effective package identities and hashes are recorded, and a real PostgreSQL install without caller overrides saves the selected runtime. This qualifies the original install/partial-report/links/repeat feature setup, not end-to-end runtime migration or override handling. The actual5131 noncompletion and override journey remain unresolved. Native/human bounds and the original480000ms stay fixed. Failed-turn evidence retirement is defensive coverage; the previous53 missing-original ENOENT cause is not diagnosed and no historical grade is inferred. Core19405 generic schema-valid human-input examples are included as an unmerged source overlay after11 malformed attempts, not a schema-defect or native-fix claim. All244 queries/context/outcomes, counts, clocks, model, credentials, SDK506/efa, launcher and trusted private interfaces remain unchanged versus936c. The only new descriptor leaves are oracle versions/sourceFiles; no new query clarification is introduced. Local qualification has447 controls across32 suites, full E2E types and normal generators passing; the21 core contract controls are carried-forward component evidence, not added to447. The latest full-ten original remains five reported passes, four failed and one missing-original/reporting gap. All originals and older failures remain retained. New representative53/578/580/585/610 and later uniform ten measurements remain UNRUN; existing native cap2 and zero automatic retries remain. Core and full-catalog PRs stay unmerged; the196/244 gate is unchanged. Current successor conditions (actual-outcome followups and Company v15 ACK): target 58449c4ecd7fd374f21f175411ef3249f55c18a3 is the immutable reviewed source. All 244 YAML definitions, original queries/outcomes, declared human/native bounds, model and clocks stay unchanged versus f569. Case 53 factual setup now describes the already-visible audience/tone/headline form and enforces stricter original-request fidelity; this is a disclosed context clarification, not a completion or latency fix. Personal v14 admits safe My secrets/definition/menu directions with a noncanonical inline-code hint only after independent visible current-company navigation. Expected definition ID, visible key and observed route are distinct; private owner/save/consumer proof remains mandatory. Team v8 corrects truthful partial-install reporting; no end-to-end runtime migration credit is claimed. Company v15 admits completed-entry ACK questions with unchanged actual-save, actor/payload, continuation and governed-approval proof. The corrected 403 request_human_input interactionKind=confirmation guidance is a recovery HYPOTHESIS. Bounded closed diagnostics from unmerged core #19416 do not prove native repair. Real pinned OpenCode model-free controls preserve the tested finish types in both directions; they do not qualify remote inference or saved-wait authority. Launch 3244 retains two original PASSES and three original FAILURES without regrading. Next measurement selects only 53/578/580/610 once with native cap 2, zero automatic retries and original clocks/model. Later uniform ten remains separately UNRUN; unchanged 585 genuine PASS is carried-forward regression evidence, not a new run. Source SDK506/efa, launcher, ten protected helpers/five source-parity files and trusted wire are unchanged. Core #19325 and #19416 stay OPEN and UNMERGED, as does the full catalog; the 196/244 gate remains.",
+      "conditions": "Historical qualification conditions (retained; statements that all requests or sourceFiles remain fixed refer to those earlier successors): New candidate measurements only. Original definitions, prior failed attempts and source6 ab201 remain historical. This target retains that catalog and integrates merged runtime fixes #18711, #18713 and #18718, with the prior-run restoration condition adapted to its existing owner. It adds the reviewed previous-question locator, attributed human-only denial and conditional-outcome oracle, and actor-sensitive timeline narrative/recorded-reassignment fixes. Closed finish diagnostics retain an effective schema digest, hashed call correlation and bounded type/category enums only. Historical MCP timeout and continuation-shape causes remain unresolved; no new all-ten PASS is claimed. Queries, model, human/native counts and original clocks remain fixed; the earlier Studio144 explicit 2..3 accounting stays. Core PRs18717/18734/18742 are now merged. SDK115 completion remains UNKNOWN and the other five SDK cases remain held. Full244 runtime catalog is not merged to master and the196/244 gate is unchanged. This successor binds the seven reviewed scenario repairs plus framework evidence: canonical skill navigation, original announcement phase clock, attributed timeline context, bound hire revision history, credential warning and configuration-question admission, completed team visibility, and canonical private framework evidence. Twelve declaration fields across eleven cases change only oracle versions and skill source-file provenance. All original requests, setup, human/native bounds, model and clocks remain fixed. Historical failed attempts and missing-original UNKNOWN grades remain unchanged; no uniform-ten PASS is claimed. The existing SDK506/efa qualification is reused only for byte-identical registered source inputs. This next successor adds reviewed question-surface observation, grounded scenario grading and safe credential-guidance boundaries after the retained uniform attempt. Eleven existing oracle-version leaves advance; all sourceFiles declarations, requests, setup, counts, clocks, model, launcher and private protocol helpers remain fixed. Component qualification does not attest a new uniform-ten pass.\n\nPrevious successor conditions (retained): This successor measures five reviewed repairs at the retained original model and bounds. Exactly one request is clarified: multipart53 now explicitly asks to walk through the visible form; its original broad request and failures4623/4717 remain historical. The previous inventory0cf530 is retained and the disclosed clarified inventory is814bb363. Other243 catalog requests are unchanged. The company-secret second human message now references the actual saved non-secret metadata instead of repeating the initial request; native continuation must remain attributed to the actual agent. Five oracle-version leaves and four source-file additions change; launcher, private helpers, SDK506/efa, identities, counts, clocks and the196/244 gate remain fixed. All five successor journeys remain unrun; component proof is not a PASS. For Team610, independently saved canonical skill/version/member proof establishes recovery; no required recovery-success phrase is imposed. A contradictory current denial still fails. If the required skill remains missing, truthful disclosure of that condition remains required.\n\nPrevious retained successor conditions: This target adds the reviewed personal secure-entry confirmation handoff, the typographic team partial-warning observer correction, and the company-secret authorization fix from unmerged core PR #19325. Personal v10 retains two declared logical human actions: one canonical chat request plus one independently verified same-human secure-save confirmation handoff. Raw chat comments remain one. Team v5 accepts the actual named-skill warning with a typographic apostrophe; saved-state, repeat, runtime, link, and false-success checks remain required. The company route returns scoped 403 guidance before malformed-body validation and preserves board-only creation. Its effect on the unfinished native turn is unproven. The three affected journeys are unrun on this target. Existing failed attempts remain failed. All queries, expected outcomes, native and human bounds, clocks, profile, model, launcher, private protocol, SDK506/efa, and the 196/244 admission gate remain fixed, including the recorded case53 query clarification. Local component proof is not native feature qualification or main/core merge credit.\n\nPrevious retained successor conditions: This target repairs personal secure-entry observation and truthful human acknowledgment, company secure-entry language and ordinary visible menu navigation, team current-skill claim attribution, and native completion feedback that asks for usable product links. Personal v11 expands visible Details before entry when needed, binds the exact value-entry dialog instead of the underlying definition sheet, and sends a truthful secure-save acknowledgment on the plain-comment path. The latter path was not reached by the prior failed attempt. Company v9 and the four shared-language consumers v5 keep explicit non-chat exclusions local to secure entry. Team v6 retains independent saved-state proof and rejects contradictory current claims. The source includes the separately reviewed, unmerged completion-feedback core hunk. All affected native journeys remain unrun on this target; original failures remain failed. The prior personal first native took580602ms, so completion within the unchanged660s remains unproven. Queries, counts, clocks, model, retries, SDK506/efa, launcher and private transfer interfaces are unchanged from the previous target; the recorded case53 clarification remains retained. Local control proof is not native PASS or a core merge.\n\nPrevious retained successor conditions: This unrun successor adds only the reviewed Company reference, credential-request and actor-boundary corrections plus Team current-assertion temporal scoping. Canonical server default reference metadata is accepted without accepting unknown fields or relaxed policy. Independent unsafe transfer requests remain rejected. Team current denials cannot be hidden by unrelated historical recovery prose. Versions and descriptor bytes are unchanged from the previous unrun target. The six changed source files pass233 affected controls and full E2E types. All prior native failures and the personal latency limitation remain. All queries, run counts, clocks, model, retries, launcher, SDK506 and private interfaces remain unchanged.\n\nPrevious retained successor conditions: This final reviewed successor adds only bounded Team historical-assertion scope, the actual visible Account-menu path to Company settings, and nearest secure-destination attribution with ordinary secure page/form suffixes. Current contradictions and intervening public destinations remain rejected. The six changed source paths pass271 affected controls, two offline browser canaries and full E2E types. Descriptor bytes and unrun versions remain unchanged. All original failures, queries, counts, clocks, model, retries, SDK506, launcher, production inputs and private interfaces are retained. Native acceptance remains unproved until the next actual run.\n\nPrevious retained successor conditions: The measured parent reached seven independently reviewed passes out of ten. This successor changes only author-skill observation and the staged unsafe credential destination guard. Author v5 accepts proven author-only self-use without inventing assignment requirements, but preserves explicit global-assignment denial and source/resource proof. Shared guard semantics are versioned once across all six declared dependents: company v10, personal v12, and four external v6 consumers. The seven descriptor changes are oracle-version leaves only. All 244 YAML identities, queries, context, expected outcomes, native/human bounds, clocks, credentials, model, SDK506, launcher and private interfaces remain unchanged. Local qualification passes214 affected controls and full E2E types. These versions remain native-unrun. Timeline and company native noncompletion remain unresolved; this source makes no latency or concurrency fix claim. The isolated company concurrency diagnostic run42124035785 remains a separate measurement. All original failures remain failed.\n\nPrevious retained successor conditions: The isolated company attempt5055 failed after a succeeded255949ms native turn produced a valid actor-bound secure saved-name question with a non-secret proposed metadata default. The previous oracle rejected any initialText. This successor admits only blank or bounded metadata defaults in the company saved-secret-name variant and verifies the same canonical payload in independent human accounting. Company v11 is native-unrun. Secure entry and the second native were not reached in the failed original. This is an assertion repair, not a runtime, latency or concurrency fix. All244 definitions retain their queries, contexts, expected outcomes, native/human bounds, clocks, credentials and model. The parent full-ten remains seven of ten measured passes. New local qualification passes286 distinct affected controls and full E2E types; SDK506, launcher and private interfaces remain unchanged. All failed originals stay failed.\n\nPrevious retained successor conditions: This successor scopes the Company private-entry observer to the actual Create secret dialog. A successful201 closes that form while opening a separate details Sheet; the old generic dialog locator could rebind and wait on the wrong Sheet. The actual worker-branch model-free canary proves successful creation with details still open and rejects failed POST or missing form. Full E2E types pass;286 unchanged functional controls are reused. Company v11 and descriptor bytes remain unchanged and native-unrun. No actual private Company save failure is claimed from the prior pre-entry attempt. The earlier CI runner shutdown cancellations and the test573 deferred-observer assertion are retained and unresolved; this observer repair makes no claim to fix them. New normal CI remains required. All244 conditions, queries, counts, clocks, credentials, model, SDK506, trusted private protocol and launcher remain unchanged.\n\nPrevious retained successor conditions: This target retains D1 and adds two evidence-backed assertion/setup repairs. Timeline v11 accepts a completed saved artifact edit with an immediately bound command Result bullet; actual5056 fully described the ordered history but remains originally FAILED. Company v12 accepts only the actual governed secret-binding approval after secure save, with current-person/question/payload/resolver/audit/continuation and saved binding proof. Its conditions explicitly change from exactly two native runs to minimum two, maximum three, and from two base human inputs to those same two plus at most one independently verified UI approval (maximum three actual human inputs). The original 480000ms Company attempt is unchanged. Actual5057 retained a saved secret and pending binding approval, remains FAILED, and did not prove native3 completion. All244 queries, model, clocks, credentials and other case bounds remain unchanged. The controller native partition is explicitly capped at two as a bounded lower-concurrency experiment, not a demonstrated performance or reliability fix; external serialization remains. Next selected466+578 experiment and later full ten remain UNRUN. SDK506, launcher and private evidence wire are unchanged; source contract/flow accounting and the static case-only marker change explicitly. No core or catalog merge/PASS is claimed.\n\nPrevious retained successor conditions: Company v13 admits the actual bound metadata-only environment-name question from failed5059 without requiring an agent-authored validation pattern or exact prompt template. Canonical human answers must pass bounded environment-name validation and any supplied pattern. Secure entry, actor/source/payload/audit/continuation, optional governance and final binding proof remain required. The separately reviewed unmerged interaction-accept core overlay omits only its redundant resolution notifier; the executed card and bound wake remain, other Settings/API notifications stay unchanged. The separately reviewed unmerged API-search overlay removes general function words from ranking so ordinary resource discovery is not displaced. Its effect on timeline noncompletion is unproven. SourceFiles explicitly declare both core dependencies. Company retains minimum 2/maximum 3 native runs, two base human inputs plus only one independently verified governance approval, and 480000ms. Timeline retains 3 native/1 human/720000ms. All244 current YAML queries, contexts and outcomes, model, clocks, credentials and other bounds remain byte-identical to the prior target; the disclosed case53 clarification remains. SDK506 inputs, launcher and protected evidence wire are unchanged. Current original5059 and5060 remain FAILED; these corrections are native-unrun and no full-ten PASS or core/catalog merge is claimed. The two-case lower-concurrency experiment remains capped at2, retries0.\n\nCurrent successor conditions: This source changes only the timeline declaration from v11 to v12 and its bounded textual recognition. The original result 5094 CEO completed a truthful ordered account in 248876ms; all three native runs succeeded and ten other original checks passed, but the original settled grade remains FAILED. Camel exitCode syntax and an omitted command subject immediately after the same worker-labeled bullet caused the narrative assertion failure. The reviewed correction preserves actor, bullet/heading, intent, nonzero outcome, chronology and independent source/native checks. Local 300 controls, full E2E types and SDK506 guard pass; this is not a native v12 PASS. Original Company result 5093 had first-CEO noncompletion and remains FAILED; its model/runtime timing cause is unresolved and this target makes no Company behavior or latency fix claim. Root plans one full-ten bounded measurement on this coherent source at cap2, zero retries, original model and all original clocks; no query, human/native accounting or permission is waived. The previous Company v13 minimum 2/maximum 3 native runs, two base human inputs plus at most one independently verified UI approval, and 480000ms remain explicit. Timeline retains 3 native/1 human/720000ms. All 244 YAML requests, contexts, outcomes and other conditions remain unchanged. Launcher, protected evidence wire and SDK506/efa inputs are unchanged. The interaction-accept and API-search production overlays remain separately reviewed, unmerged core PRs; neither the core nor the full catalog 196/244 gate is merged by this pin. Historical failed grades remain unchanged. No deterministic timing, reliability or all-ten PASS is claimed.\n\nCurrent successor conditions (f5692c57): Prior conditions above describe retained historical attempts and sources. This target retains source936c and adds reviewed Company ACK-card handling with exact current-person/card/proposal/response and secure-entry bindings, Company and Personal negated-request corrections, and the585 negated-completion preview correction. Team610 now serves the accepted package through a disposable derived catalog with only selected OpenCode profile/account metadata changed: other file bytes and non-runtime sidecar fields remain unchanged, original/effective package identities and hashes are recorded, and a real PostgreSQL install without caller overrides saves the selected runtime. This qualifies the original install/partial-report/links/repeat feature setup, not end-to-end runtime migration or override handling. The actual5131 noncompletion and override journey remain unresolved. Native/human bounds and the original480000ms stay fixed. Failed-turn evidence retirement is defensive coverage; the previous53 missing-original ENOENT cause is not diagnosed and no historical grade is inferred. Core19405 generic schema-valid human-input examples are included as an unmerged source overlay after11 malformed attempts, not a schema-defect or native-fix claim. All244 queries/context/outcomes, counts, clocks, model, credentials, SDK506/efa, launcher and trusted private interfaces remain unchanged versus936c. The only new descriptor leaves are oracle versions/sourceFiles; no new query clarification is introduced. Local qualification has447 controls across32 suites, full E2E types and normal generators passing; the21 core contract controls are carried-forward component evidence, not added to447. The latest full-ten original remains five reported passes, four failed and one missing-original/reporting gap. All originals and older failures remain retained. New representative53/578/580/585/610 and later uniform ten measurements remain UNRUN; existing native cap2 and zero automatic retries remain. Core and full-catalog PRs stay unmerged; the196/244 gate is unchanged. Current successor conditions (actual-outcome followups and Company v15 ACK): target 58449c4ecd7fd374f21f175411ef3249f55c18a3 is the immutable reviewed source. All 244 YAML definitions, original queries/outcomes, declared human/native bounds, model and clocks stay unchanged versus f569. Case 53 factual setup now describes the already-visible audience/tone/headline form and enforces stricter original-request fidelity; this is a disclosed context clarification, not a completion or latency fix. Personal v14 admits safe My secrets/definition/menu directions with a noncanonical inline-code hint only after independent visible current-company navigation. Expected definition ID, visible key and observed route are distinct; private owner/save/consumer proof remains mandatory. Team v8 corrects truthful partial-install reporting; no end-to-end runtime migration credit is claimed. Company v15 admits completed-entry ACK questions with unchanged actual-save, actor/payload, continuation and governed-approval proof. The corrected 403 request_human_input interactionKind=confirmation guidance is a recovery HYPOTHESIS. Bounded closed diagnostics from unmerged core #19416 do not prove native repair. Real pinned OpenCode model-free controls preserve the tested finish types in both directions; they do not qualify remote inference or saved-wait authority. Launch 3244 retains two original PASSES and three original FAILURES without regrading. Next measurement selects only 53/578/580/610 once with native cap 2, zero automatic retries and original clocks/model. Later uniform ten remains separately UNRUN; unchanged 585 genuine PASS is carried-forward regression evidence, not a new run. Source SDK506/efa, launcher, ten protected helpers/five source-parity files and trusted wire are unchanged. Core #19325 and #19416 stay OPEN and UNMERGED, as does the full catalog; the 196/244 gate remains. New unmeasured successor conditions (four-journey fixture calibration): target 5f74dc6545ea66ac71255ac8e6010f5215a1f257 retains all original grades from launch 3277: zero of four selected cases reported PASS. Multipart question v6 removes an automatic human dismissal from the shared send helper when the ordinary composer is usable below the form. The same form remains historical after a later comment but is answerable; the latest human direction already governs. This repairs a setup confound, not a guaranteed native reuse or completion fix. The original same-form/no-duplicate assertion stays strict. Company v16 and Personal v15, plus four shared external consumers at v8, admit a bounded instruction to enter a value at the supported secure destination and save there; actual human private save, binding approval where required, owner isolation, consumer delivery and no-leak evidence remain mandatory. The Company journey was blocked before human secure entry, so no downstream success is inferred. Personal route discovery accepts one setup hint with separately validated visible current-company issue citations; it never trusts or rewrites the hint into a private-entry route. Team v9 accepts a truthful current unattached skill caveat with the saved conflict; actual installation, recovery, actor, links and repeat evidence remain required. No runtime-migration credit is claimed. All 244 YAML definitions, identities, queries, outcomes, permissions, human/native bounds, clocks and model remain unchanged versus 58449c4. All historical conditions above and runtimeConditions remain retained. Fresh local qualification has 375 controls across 20 files, explicit installed-browser canaries, 242 declarations with zero callbacks, full runner E2E types and unchanged SDK506/efa, launcher and protected private interfaces. Earlier local type setup failures remain retained as environment failures. The next measured source remains UNRUN: native cap 2, zero automatic retries and original clocks/model. No reliability or latency claim is made. Core #19325 and #19416 and the full catalog stay OPEN and UNMERGED; the 196/244 gate remains.",
       "changedFields": [
         {
           "key": "activity.work-timeline",
@@ -555,7 +555,7 @@
           "key": "questions-and-approvals.multi-part-question",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.identity.v1",
-          "current": "paperclip.chat-catalog.required-question.v5"
+          "current": "paperclip.chat-catalog.required-question.v6"
         },
         {
           "key": "questions-and-approvals.reject-and-revise",
@@ -652,7 +652,7 @@
           "key": "secrets.configure-company-secret",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.company-secret-controller-baseline.v15"
+          "current": "paperclip.chat-catalog.company-secret-controller-baseline.v16"
         },
         {
           "key": "secrets.personal-secret",
@@ -719,7 +719,7 @@
           "key": "secrets.personal-secret",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.personal-secret.v14"
+          "current": "paperclip.chat-catalog.personal-secret.v15"
         },
         {
           "key": "skills.author-skill",
@@ -931,31 +931,31 @@
           "key": "connection-setup.secure-api-key",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "secrets.least-scope-delivery",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "secrets.secret-proposal",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "secrets.vault-reference",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "teams.install-team",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.team-install.v8"
+          "current": "paperclip.chat-catalog.team-install.v9"
         },
         {
           "key": "questions-and-approvals.multi-part-question",
@@ -1368,7 +1368,7 @@
           "key": "questions-and-approvals.multi-part-question",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.identity.v1",
-          "current": "paperclip.chat-catalog.required-question.v5"
+          "current": "paperclip.chat-catalog.required-question.v6"
         },
         {
           "key": "questions-and-approvals.reject-and-revise",
@@ -1465,7 +1465,7 @@
           "key": "secrets.configure-company-secret",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.company-secret-controller-baseline.v15"
+          "current": "paperclip.chat-catalog.company-secret-controller-baseline.v16"
         },
         {
           "key": "secrets.personal-secret",
@@ -1543,7 +1543,7 @@
           "key": "secrets.personal-secret",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.personal-secret.v14"
+          "current": "paperclip.chat-catalog.personal-secret.v15"
         },
         {
           "key": "skills.author-skill",
@@ -1799,31 +1799,31 @@
           "key": "connection-setup.secure-api-key",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "secrets.least-scope-delivery",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "secrets.secret-proposal",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "secrets.vault-reference",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.external.v7"
+          "current": "paperclip.chat-catalog.external.v8"
         },
         {
           "key": "teams.install-team",
           "field": "oracleVersion",
           "previous": "paperclip.chat-catalog.external.v1",
-          "current": "paperclip.chat-catalog.team-install.v8"
+          "current": "paperclip.chat-catalog.team-install.v9"
         },
         {
           "key": "secrets.configure-company-secret",
@@ -2035,7 +2035,7 @@
       },
       "candidateLauncherSnapshot": {
         "path": "fixtures/chat-repair-candidate-launcher.txt",
-        "targetSha": "58449c4ecd7fd374f21f175411ef3249f55c18a3",
+        "targetSha": "5f74dc6545ea66ac71255ac8e6010f5215a1f257",
         "sourcePath": "tests/runner-e2e/launch.ts",
         "gitBlobOid": "c88df15f509b2ac8638af826647a97d45f16bd1f"
       }
@@ -6801,7 +6801,7 @@
         "connection-setup/credentials"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.external.v7",
+      "oracleVersion": "paperclip.chat-catalog.external.v8",
       "sourceFiles": [
         "chat-catalog-domains/external-secure-key.ts",
         "chat-query-attachments.ts",
@@ -10150,7 +10150,7 @@
         "questions-and-approvals/questions"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.required-question.v5",
+      "oracleVersion": "paperclip.chat-catalog.required-question.v6",
       "sourceFiles": [
         "chat-catalog-domains/identity-support.ts",
         "chat-catalog-domains/internal-support.ts",
@@ -11376,7 +11376,7 @@
         "connection-setup/credentials"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.company-secret-controller-baseline.v15",
+      "oracleVersion": "paperclip.chat-catalog.company-secret-controller-baseline.v16",
       "sourceFiles": [
         "../../server/src/routes/secrets.ts",
         "../../packages/paperclip-runner/src/cli/opencode-app-server-proxy.ts",
@@ -11442,7 +11442,7 @@
         "secrets/runtime-delivery"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.external.v7",
+      "oracleVersion": "paperclip.chat-catalog.external.v8",
       "sourceFiles": [
         "chat-catalog-domains/external-secret-delivery.ts",
         "chat-catalog-domains/external-secret-endpoint.ts",
@@ -11506,7 +11506,7 @@
         "secrets/user-secrets"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.personal-secret.v14",
+      "oracleVersion": "paperclip.chat-catalog.personal-secret.v15",
       "sourceFiles": [
         "../../packages/paperclip-runner/src/protocol-actions/request-human-input.ts",
         "chat-catalog-domains/external-personal-secret.ts",
@@ -11575,7 +11575,7 @@
         "secrets/proposals"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.external.v7",
+      "oracleVersion": "paperclip.chat-catalog.external.v8",
       "sourceFiles": [
         "chat-catalog-domains/external-secret-proposal.ts",
         "chat-catalog-domains/external-secret-scan.ts",
@@ -11638,7 +11638,7 @@
         "secrets/vault-import"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.external.v7",
+      "oracleVersion": "paperclip.chat-catalog.external.v8",
       "sourceFiles": [
         "chat-catalog-domains/external-vault-reference.ts",
         "chat-catalog-domains/external-fixtures.ts",
@@ -13494,7 +13494,7 @@
         "agents/hire"
       ],
       "checks": null,
-      "oracleVersion": "paperclip.chat-catalog.team-install.v8",
+      "oracleVersion": "paperclip.chat-catalog.team-install.v9",
       "sourceFiles": [
         "chat-catalog-domains/external-team-install.ts",
         "chat-catalog-domains/external-team-conditional.ts",
diff --git a/tests/runner-e2e/chat-full-catalog-testops-manifest.test.mjs b/tests/runner-e2e/chat-full-catalog-testops-manifest.test.mjs
index d954862340e..25251b38080 100644
--- a/tests/runner-e2e/chat-full-catalog-testops-manifest.test.mjs
+++ b/tests/runner-e2e/chat-full-catalog-testops-manifest.test.mjs
@@ -103,7 +103,7 @@ test('repair source metadata binds the corrected candidate and explicit changed
   const repair = manifest.source.repairMetadata;
   assert.equal(repair.baseTargetSha, '3b66c3c144360ddf32714a0742fd774b8ceafb16');
   assert.equal(repair.previousTargetSha, 'ab2019e976076ec0eb60b026844f3d9211cb0208');
-  assert.equal(manifest.targetSha, '58449c4ecd7fd374f21f175411ef3249f55c18a3');
+  assert.equal(manifest.targetSha, '5f74dc6545ea66ac71255ac8e6010f5215a1f257');
   assert.equal(repair.definitionSourceSha, manifest.metadataSourceSha);
   assert.equal(repair.candidateDescriptorSnapshot, 'fixtures/chat-repair-candidate-descriptors.json');
   const descriptorBytes = readFileSync(new URL(repair.candidateDescriptorSnapshot, import.meta.url));
diff --git a/tests/runner-e2e/fixtures/chat-repair-candidate-descriptors.json b/tests/runner-e2e/fixtures/chat-repair-candidate-descriptors.json
index 1c9ea392098..daac102f7ef 100644
--- a/tests/runner-e2e/fixtures/chat-repair-candidate-descriptors.json
+++ b/tests/runner-e2e/fixtures/chat-repair-candidate-descriptors.json
@@ -2600,7 +2600,7 @@
       "chat-catalog-domains/identity-support.ts",
       "chat-scenarios/connection-setup.yaml"
     ],
-    "oracleVersion": "paperclip.chat-catalog.external.v7",
+    "oracleVersion": "paperclip.chat-catalog.external.v8",
     "expectedRunCount": 1,
     "turnTimeoutMs": 120000,
     "attemptTimeoutMs": 420000,
@@ -4231,7 +4231,7 @@
       "cleanup-verification.ts",
       "runner.spec.ts"
     ],
-    "oracleVersion": "paperclip.chat-catalog.required-question.v5",
+    "oracleVersion": "paperclip.chat-catalog.required-question.v6",
     "expectedRunCount": 2,
     "turnTimeoutMs": 120000,
     "attemptTimeoutMs": 300000,
@@ -4923,7 +4923,7 @@
       "chat-flow.ts",
       "chat-scenarios/secrets.yaml"
     ],
-    "oracleVersion": "paperclip.chat-catalog.company-secret-controller-baseline.v15",
+    "oracleVersion": "paperclip.chat-catalog.company-secret-controller-baseline.v16",
     "expectedRunCount": 3,
     "minimumRunCount": 2,
     "expectedHumanMessageCount": 2,
@@ -4964,7 +4964,7 @@
       "../../packages/plugins/sdk/dist/index.js",
       "chat-scenarios/secrets.yaml"
     ],
-    "oracleVersion": "paperclip.chat-catalog.external.v7",
+    "oracleVersion": "paperclip.chat-catalog.external.v8",
     "expectedRunCount": 3,
     "expectedHumanMessageCount": 1,
     "minimumRunCount": 3,
@@ -5009,7 +5009,7 @@
       "../../ui/src/pages/secrets/SetMyUserSecretDialog.tsx",
       "chat-scenarios/secrets.yaml"
     ],
-    "oracleVersion": "paperclip.chat-catalog.personal-secret.v14",
+    "oracleVersion": "paperclip.chat-catalog.personal-secret.v15",
     "expectedRunCount": 3,
     "expectedHumanMessageCount": 2,
     "minimumRunCount": 3,
@@ -5041,7 +5041,7 @@
       "../../server/src/services/secret-proposal-notifications.ts",
       "chat-scenarios/secrets.yaml"
     ],
-    "oracleVersion": "paperclip.chat-catalog.external.v7",
+    "oracleVersion": "paperclip.chat-catalog.external.v8",
     "expectedRunCount": 4,
     "expectedHumanMessageCount": 4,
     "minimumRunCount": 4,
@@ -5089,7 +5089,7 @@
       "../../ui/src/pages/secrets/ImportFromVaultDialog.tsx",
       "chat-scenarios/secrets.yaml"
     ],
-    "oracleVersion": "paperclip.chat-catalog.external.v7",
+    "oracleVersion": "paperclip.chat-catalog.external.v8",
     "expectedRunCount": 3,
     "expectedHumanMessageCount": 2,
     "minimumRunCount": 2,
@@ -6046,7 +6046,7 @@
       "chat-flow.ts",
       "chat-scenarios/teams.yaml"
     ],
-    "oracleVersion": "paperclip.chat-catalog.team-install.v8",
+    "oracleVersion": "paperclip.chat-catalog.team-install.v9",
     "expectedRunCount": 2,
     "expectedHumanMessageCount": 2,
     "turnTimeoutMs": 120000,