novelKR · Oct 15, 2026 · Oct 15, 2026
diff --git a/AGENTS.md b/AGENTS.md
@@ -2,7 +2,7 @@
 
 Read the English editorial reference `docs/design.md`, the design revisions it links (currently `docs/design-revision-1.md` and `docs/design-revision-2.md`), the immutable approval `docs/design.ko.md`, `docs/contracts.md`, and `milestones.json` before changing a contract or milestone boundary. The historical approval preserves the decisions of its time; the editorial reference and its revisions are the current baseline; contracts describe implemented behavior only. The user's current instructions take precedence over this file.
 
-- CS-RG implementation is suspended: pending the CS-RG integration-boundary revalidation, do not implement any CS-RG unit (CSRG-C00, CSRG-C03 and CSRG-C09 in particular) or design revision 1's CodeSpace execution-ownership choices. No replacement architecture has been approved. *Current state, 2026-10-14:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension: each unit starts only on the owner's direction, after the previous one is merged and verified. U1 to U6 are merged and verified, CS-RG is qualified on macOS for one exact combination, and the suspension still applies to the CSRG-C units. On 2026-10-14 the owner directed P1-RECOVERY's implementation in CodeSpace, outside this suspension, as one pull request per unit from P1R-C01 to P1R-C06, re-baselined in its plan: each unit starts on the owner's approval after the previous one is merged and verified. P1R-C01 and P1R-C02 are merged and verified, and P1R-C03 is active.
+- CS-RG implementation is suspended: pending the CS-RG integration-boundary revalidation, do not implement any CS-RG unit (CSRG-C00, CSRG-C03 and CSRG-C09 in particular) or design revision 1's CodeSpace execution-ownership choices. No replacement architecture has been approved. *Current state, 2026-10-15:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension: each unit starts only on the owner's direction, after the previous one is merged and verified. U1 to U6 are merged and verified, CS-RG is qualified on macOS for one exact combination, and the suspension still applies to the CSRG-C units. On 2026-10-14 the owner directed P1-RECOVERY's implementation in CodeSpace, outside this suspension, as one pull request per unit from P1R-C01 to P1R-C06, re-baselined in its plan: each unit starts on the owner's approval after the previous one is merged and verified. P1R-C01 to P1R-C03 are merged and verified, and P1R-C04 is active.
 - Keep CodeSpace/Codex types, process ownership, PTY and output management outside this repository's authority core.
 - External implementations, Codex included, enter DevGuard only through a declared adapter or binding with a reviewed, immutable pin, justified by what it replaces and by how its cost is contained ([design revision 2](docs/design-revision-2.md)). The authority core and the generic client contract carry no CodeSpace or Codex product types. `scripts/validate.py` still rejects every `codex-` and `codespace-` package; only the reviewed PR that adds the first real adapter component changes that gate, together with tests of its boundary. Adapted or patched upstream code records its provenance and divergence.
 - Keep reservation, planned policy, applied evidence, and successful user executable startup distinct.

diff --git a/docs/ko/planning/README.md b/docs/ko/planning/README.md
@@ -23,7 +23,7 @@
 
 ## 마일스톤과 우선 경로
 
-> **상태:** 설계 개정 1의 실행 소유권 선택을 포함한 CS-RG는 CS-RG 통합 경계 재검증이 끝날 때까지 구현 지시로서 효력이 중지되며, 어떤 CS-RG 단위도 시작할 수 없습니다. CS-RG 계획의 표기를 참고하십시오. *2026-10-14 현재 상태:* 소유자는 2026-10-02에 이 효력 중지와 별도로 CS-RG 구현을 CodeSpace의 U1–U6 단위로 지시했습니다. U1부터 U6까지 병합·검증되었고, CS-RG는 정확히 한 조합에 대해 macOS에서 qualification을 마쳤습니다. 이 계획의 단위는 여전히 효력이 중지된 채 시작하지 않았습니다. P1-RECOVERY는 소유자 지시로 2026-10-14에 시작해 그 계획의 재기준대로 진행하며, P1R-C01과 P1R-C02는 병합·검증되었고 지금은 P1R-C03을 진행합니다.
+> **상태:** 설계 개정 1의 실행 소유권 선택을 포함한 CS-RG는 CS-RG 통합 경계 재검증이 끝날 때까지 구현 지시로서 효력이 중지되며, 어떤 CS-RG 단위도 시작할 수 없습니다. CS-RG 계획의 표기를 참고하십시오. *2026-10-15 현재 상태:* 소유자는 2026-10-02에 이 효력 중지와 별도로 CS-RG 구현을 CodeSpace의 U1–U6 단위로 지시했습니다. U1부터 U6까지 병합·검증되었고, CS-RG는 정확히 한 조합에 대해 macOS에서 qualification을 마쳤습니다. 이 계획의 단위는 여전히 효력이 중지된 채 시작하지 않았습니다. P1-RECOVERY는 소유자 지시로 2026-10-14에 시작해 그 계획의 재기준대로 진행하며, P1R-C01부터 P1R-C03까지 병합·검증되었고 지금은 P1R-C04를 진행합니다.
 
 ```mermaid
 flowchart LR

diff --git a/docs/ko/planning/milestones/P1-RECOVERY.md b/docs/ko/planning/milestones/P1-RECOVERY.md
@@ -1,6 +1,6 @@
 # P1-RECOVERY — 독립 Runner 생존 중 Gateway 복구
 
-> *2026-10-14 현재 상태:* 소유자는 2026-10-14에 P1-RECOVERY 구현을 CodeSpace에서 P1R-C01부터 P1R-C06까지 단위마다 PR 하나로 차례로 진행하도록 지시했습니다. 각 단위는 앞 단위가 병합·검증된 뒤 소유자의 승인으로 시작합니다. P1R-C01과 P1R-C02는 병합·검증되었고(novelKR/CodeSpace#102와 #103, CodeSpace `main` `5976df0`), 지금 진행하는 단위는 P1R-C03입니다. 원장은 P1-RECOVERY를 `in-progress`, qualification `not-run`으로 기록하고, 새 모드는 P1R-C06의 qualification 전까지 지원 모드가 아닙니다. 아래 [재기준](#재기준-2026-10-14)이 이 계획의 나머지와 다르면 재기준을 따르며, 나머지는 이력으로 바꾸지 않고 남깁니다.
+> *2026-10-15 현재 상태:* 소유자는 2026-10-14에 P1-RECOVERY 구현을 CodeSpace에서 P1R-C01부터 P1R-C06까지 단위마다 PR 하나로 차례로 진행하도록 지시했습니다. 각 단위는 앞 단위가 병합·검증된 뒤 소유자의 승인으로 시작합니다. P1R-C01부터 P1R-C03까지 병합·검증되었고(novelKR/CodeSpace#102, #103, #104, CodeSpace `main` `1fda789`), 지금 진행하는 단위는 P1R-C04입니다. 원장은 P1-RECOVERY를 `in-progress`, qualification `not-run`으로 기록하고, 새 모드는 P1R-C06의 qualification 전까지 지원 모드가 아닙니다. 아래 [재기준](#재기준-2026-10-14)이 이 계획의 나머지와 다르면 재기준을 따르며, 나머지는 이력으로 바꾸지 않고 남깁니다.
 
 소유 저장소: CodeSpace. 상태: `not-started` / `not-run`. 진입: CSRG-C08. 완료: 운영자 선택 모드에서 독립 Runner가 기존 프로세스·입출력·timeout을 계속 소유하고 Gateway 반복 재시작과 재연결을 복구한다. InProcess 및 Runner 자체 재시작 후 PTY 복원은 최초 범위에 포함하지 않는다.
 

diff --git a/docs/milestones.md b/docs/milestones.md
@@ -9,7 +9,7 @@ The [detailed planning index](planning/README.md) owns the 48 proposed commit un
 | DG-0 | Independent repository, approved design, resource and compatibility contracts, durable state transitions, fake-backend fault tests, reproducible 1.95.0 validation | Implemented; use the exact-source qualification report for validation status |
 | DG-1 | Real macOS host probes, daemon and CLI, launch gate, Cargo/generic adapters, parent-budget candidate tests, safe service update/repair, three measured SLO runs per target backend | Implemented: C01 configuration/storage, C02 authenticated foreground transport, C03 native boot/process/pressure evidence, C04 cooperative policy/scope evidence, C05 fenced launch helper, C06 reconciliation, C07 command-line owner, C08 Cargo adapters, C09 installation as the current user's LaunchAgent, C10 parent leases with candidate authorities, C11 upgrade and repair and C12 the SLO qualification harness. The macOS SLO is qualified for release `0.1.0-6e7e065-94d85365` on the measured host and policy (measured 2026-10-13, after `0.1.0-5daee5d-b3fa569e` on 2026-09-26); Linux is not qualified |
 | CS-RG | Execution-boundary fitness (C00), full-SHA consumer pin, a common execution supervisor with pre-spawn slots and one reaper, PrepareExec/ExecPrepared, approval preservation, bounded control/data lanes, output and replay, InProcess/UDS and pipe/PTY parity, the legacy-backend decision (C09) and upstream regression qualification of the resulting head | Implemented, and qualified on macOS for one exact combination: implemented in CodeSpace as the owner-directed units U1–U6 (2026-10-02), outside the suspended C-series plan, all merged and verified (CodeSpace #82, #83, #84, #88, #90 and #92, the governed PTY observer #93 and #95, and for U6 #97, #98 and #99). U6 qualified CodeSpace `ca306ee` with DevGuard's client `6e7e065`, release `0.1.0-6e7e065-94d85365` and Codex `6b9826e` with its recorded patch, in the runner modes `in-process` and `uds`, pipe and PTY ([qualification report](https://github.com/novelKR/CodeSpace/blob/241cf6c4ee95111a70f581319ac04ee16beaf94e/docs/cs-rg-qualification-report.md)); Linux `required` stays unsupported until DG-LINUX |
-| P1-RECOVERY | Opt-in Gateway restart/reconnection while an independent Runner retains processes and I/O; reconcile workspace, approvals and DevGuard leases | In progress, not qualified: implemented in CodeSpace one pull request per unit on the owner's direction of 2026-10-14, as re-baselined in its [plan](planning/milestones/P1-RECOVERY.md#re-baseline-2026-10-14); P1R-C01 and P1R-C02 are merged and verified (CodeSpace #102, #103), and P1R-C03 is the active unit. InProcess and Runner-loss I/O restoration excluded |
+| P1-RECOVERY | Opt-in Gateway restart/reconnection while an independent Runner retains processes and I/O; reconcile workspace, approvals and DevGuard leases | In progress, not qualified: implemented in CodeSpace one pull request per unit on the owner's direction of 2026-10-14, as re-baselined in its [plan](planning/milestones/P1-RECOVERY.md#re-baseline-2026-10-14); P1R-C01 to P1R-C03 are merged and verified (CodeSpace #102, #103, #104), and P1R-C04 is the active unit. InProcess and Runner-loss I/O restoration excluded |
 | DG-LINUX | Actual Linux controller, ancestor capacity, complete sandbox/proxy scope, control protection and reclaim evidence | Not started; required for product completion |
 | DG-CACHE | Registered-root lease/reclaim exclusion, protected artifacts/evidence, interrupted trash sweep and measured physical recovery | Not started; not a P1 prerequisite |
 | DG-ADAPTERS | Tool-specific Python, Node/Bun, make/ninja and container/VM verification, without language branches in core | Not started; not a P1 prerequisite |

diff --git a/docs/planning/README.md b/docs/planning/README.md
@@ -22,7 +22,7 @@ The contract baseline is DG-0: accounting, persistence and fake-backend tests. D
 
 ## Dependencies
 
-> **Status:** CS-RG, including design revision 1's execution-ownership choices, is suspended as an implementation directive while the CS-RG integration-boundary revalidation is pending; no CS-RG unit may start. See the notice in the CS-RG plan. *Current state, 2026-10-14:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension; U1 to U6 are merged and verified, and CS-RG is qualified on macOS for one exact combination. This plan's units remain suspended and not started. P1-RECOVERY started on the owner's direction of 2026-10-14, as re-baselined in its plan; P1R-C01 and P1R-C02 are merged and verified, and P1R-C03 is active.
+> **Status:** CS-RG, including design revision 1's execution-ownership choices, is suspended as an implementation directive while the CS-RG integration-boundary revalidation is pending; no CS-RG unit may start. See the notice in the CS-RG plan. *Current state, 2026-10-15:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension; U1 to U6 are merged and verified, and CS-RG is qualified on macOS for one exact combination. This plan's units remain suspended and not started. P1-RECOVERY started on the owner's direction of 2026-10-14, as re-baselined in its plan; P1R-C01 to P1R-C03 are merged and verified, and P1R-C04 is active.
 
 ```mermaid
 flowchart LR

diff --git a/docs/planning/milestones/P1-RECOVERY.md b/docs/planning/milestones/P1-RECOVERY.md
@@ -1,6 +1,6 @@
 # P1-RECOVERY — Gateway recovery with a surviving independent Runner
 
-> *Current state, 2026-10-14:* on 2026-10-14 the owner directed P1-RECOVERY's implementation in CodeSpace, one pull request per unit from P1R-C01 to P1R-C06, in order. Each unit starts on the owner's approval after the previous one is merged and verified. P1R-C01 and P1R-C02 are merged and verified (novelKR/CodeSpace#102 and #103, CodeSpace `main` `5976df0`), and P1R-C03 is the active unit. The ledger records P1-RECOVERY as `in-progress`, qualification `not-run`, and the new mode is not a supported mode until P1R-C06 qualifies it. Where the [re-baseline](#re-baseline-2026-10-14) below differs from the rest of this plan, the re-baseline applies; the rest is kept unchanged as history.
+> *Current state, 2026-10-15:* on 2026-10-14 the owner directed P1-RECOVERY's implementation in CodeSpace, one pull request per unit from P1R-C01 to P1R-C06, in order. Each unit starts on the owner's approval after the previous one is merged and verified. P1R-C01 to P1R-C03 are merged and verified (novelKR/CodeSpace#102, #103 and #104, CodeSpace `main` `1fda789`), and P1R-C04 is the active unit. The ledger records P1-RECOVERY as `in-progress`, qualification `not-run`, and the new mode is not a supported mode until P1R-C06 qualifies it. Where the [re-baseline](#re-baseline-2026-10-14) below differs from the rest of this plan, the re-baseline applies; the rest is kept unchanged as history.
 
 Owner: CodeSpace. Baseline implementation: `not-started`; qualification: `not-run`. Entry: CSRG-C08. Completion: Qualify repeated Gateway restart/reconnect while the same independent Runner retains processes, I/O and original deadlines. Preserve existing modes; exclude InProcess and I/O restoration after Runner restart.
 

diff --git a/docs/translations.json b/docs/translations.json
@@ -28,8 +28,8 @@
       "id": "planning-readme",
       "source": "docs/planning/README.md",
       "translation": "docs/ko/planning/README.md",
-      "reviewed_source_sha256": "8192d82b925a887d9257dd37dd4b673e34b6e91d80031cff94fa85d6ba640979",
-      "reviewed_translation_sha256": "0578024a1a646542d019f2d10303be42e2213c66bae265bf05f9675dabba4775"
+      "reviewed_source_sha256": "a7ac1fc7bb508ca14c86dc3d7b9a15e0529d4f2686e47ebb3482ff04b35c6e1d",
+      "reviewed_translation_sha256": "c0f5e0bc29e58649fadb84121ad9078e0903326732223e4832d90593ac109543"
     },
     {
       "id": "planning-codespace-integration",
@@ -98,8 +98,8 @@
       "id": "planning-milestones-p1-recovery",
       "source": "docs/planning/milestones/P1-RECOVERY.md",
       "translation": "docs/ko/planning/milestones/P1-RECOVERY.md",
-      "reviewed_source_sha256": "237373af0162b3a8f09091ee1590051da2af2d5674515175e649a08787d8f871",
-      "reviewed_translation_sha256": "c52419981e94e19fda9e98fb478ddf2448ed7c525223b27aa6429ee7fe847a13"
+      "reviewed_source_sha256": "0a1d6fd548d6963f637b9b3dd9718831c8815a7bcc397111d651d4ceeded56e5",
+      "reviewed_translation_sha256": "2daee5d80b3834ce6852a329c765dcd570ad6572a986b28ebb72506a586d87d7"
     },
     {
       "id": "planning-pr-delivery",

diff --git a/milestones.json b/milestones.json
@@ -8,7 +8,7 @@
     {"id": "DG-0", "owner": "DevGuard", "requires": [], "design_status": "accepted", "implementation_status": "implemented", "qualification": "report-required", "report_command": "python3 scripts/validate.py", "planning_document": "docs/planning/milestones/DG-0.md"},
     {"id": "DG-1", "owner": "DevGuard", "requires": ["DG-0"], "design_status": "accepted", "implementation_status": "implemented", "qualification": "macos-qualified", "qualified_release": "0.1.0-6e7e065-94d85365", "planning_document": "docs/planning/milestones/DG-1.md"},
     {"id": "CS-RG", "owner": "CodeSpace", "requires": ["DG-1"], "design_status": "accepted", "implementation_status": "implemented", "qualification": "macos-qualified", "qualified_combination": {"codespace": "ca306eeaec42818c5fdb2a6ca3b6765507e8af8c", "devguard_client": "6e7e065a0dd5b3876dc7f4546ab76069489937d1", "devguard_release": "0.1.0-6e7e065-94d85365", "codex": "6b9826e3aa83b1a5947db50f4332cb9c65f1b340", "codex_patched_tree": "1999937194e3a68d982be85679557f0e50fe5408", "rust": "1.95.0", "runner_modes": ["in-process", "uds"]}, "planning_document": "docs/planning/milestones/CS-RG.md", "units": {"directed": "2026-10-02", "as_of": "2026-10-14", "CSRG-U1": "merged-verified", "CSRG-U1-hardening": "merged-verified", "CSRG-U2": "merged-verified", "CSRG-U3": "merged-verified", "CSRG-U4": "merged-verified", "CSRG-U5": "merged-verified", "CSRG-U6": "merged-verified"}},
-    {"id": "P1-RECOVERY", "owner": "CodeSpace", "requires": ["CS-RG"], "design_status": "accepted", "implementation_status": "in-progress", "qualification": "not-run", "planning_document": "docs/planning/milestones/P1-RECOVERY.md", "units": {"directed": "2026-10-14", "as_of": "2026-10-14", "P1R-C01": "merged-verified", "P1R-C02": "merged-verified", "P1R-C03": "active", "P1R-C04": "not-started", "P1R-C05": "not-started", "P1R-C06": "not-started"}},
+    {"id": "P1-RECOVERY", "owner": "CodeSpace", "requires": ["CS-RG"], "design_status": "accepted", "implementation_status": "in-progress", "qualification": "not-run", "planning_document": "docs/planning/milestones/P1-RECOVERY.md", "units": {"directed": "2026-10-14", "as_of": "2026-10-15", "P1R-C01": "merged-verified", "P1R-C02": "merged-verified", "P1R-C03": "merged-verified", "P1R-C04": "active", "P1R-C05": "not-started", "P1R-C06": "not-started"}},
     {"id": "DG-LINUX", "owner": "DevGuard + CodeSpace", "requires": ["CS-RG"], "design_status": "accepted", "implementation_status": "not-started", "qualification": "not-run", "required_for_product_completion": true, "planning_document": "docs/planning/milestones/DG-LINUX.md"},
     {"id": "DG-CACHE", "owner": "DevGuard", "requires": ["DG-1"], "design_status": "accepted", "implementation_status": "not-started", "qualification": "not-run", "planning_document": "docs/planning/milestones/DG-CACHE.md"},
     {"id": "DG-ADAPTERS", "owner": "DevGuard", "requires": ["DG-1"], "design_status": "accepted", "implementation_status": "not-started", "qualification": "not-run", "planning_document": "docs/planning/milestones/DG-ADAPTERS.md"}